<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 18, 2013 at 7:50 PM, Patrick Le <span dir="ltr"><<a href="mailto:ple@jhmi.edu" target="_blank">ple@jhmi.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal">Does anyone have any experience integrating SAML 2.0 authentication against Juniper Secure Access with Shibboleth as the IDP?<u></u><u></u></p>
</div></div></blockquote><div><br></div><div>Yes, we're running a Juniper VPN and we use our Shib IdP to authenticate to it via SAML2.<br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US"><div>
<p class="MsoNormal">I’m having issues getting the Juniper appliance to pick up the userID from the attribute assertion. On the juniper appliance under the “Auth Server” configuration page, there is a “User Name Template” field where you’re supposed to define
the attribute name for the userID. Examples given by juniper are:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span>Example: <assertionNameDN.uid>, uid from X509SubjectName.
</span><br>
<span>The entire assertion name identifier if not specified; Or
</span><br>
<span><userAttr.attr>, attr from AttributeStatement attributes.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>I first tried to leave the field blank so that it gets the name identifier from the entire assertion. That allows me to login, but the UserID from the juniper logs is some random string of numbers which means
nothing to us because we can’t correlate that back to an actual user.<br></span></p><p></p></div></div></blockquote><div> Attributes won'<br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US"><div>
<p class="MsoNormal"><span>Juniper support has been less than helpful, so I’m hoping I’ll get better luck on the shib users list.
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal">Thanks<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Patrick<u></u><u></u></p>
</font></span></div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div></div>