<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I’m not in direct contact with the Citirix guys – this is an implementation for our comms team and I’m just doing the authentication bit, so they will be contacting Citirix in the first instance but in the meantime
I’d like a headstart while I wait! Also I’m wary that the response will be along the lines of they’d rather support ADFS so just getting all the help I can
</span><span style="font-family:Wingdings;color:#1F497D">J</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">James<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">_____________________________________<br>
James Todd</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"> | Data Centre & Operations Analyst</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Edinburgh Napier University</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"><br>
Craiglockhart Campus<br>
Edinburgh<br>
EH14 1DJ</span><span style="color:black;mso-fareast-language:EN-GB"> </span><span style="font-size:12.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Tel: 0131 455 4313<br>
Email: <a href="mailto:j.todd@napier.ac.uk" target="_blank"><span style="color:blue">j.todd@napier.ac.uk</span></a></span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="mso-fareast-language:EN-GB"> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Dave Perry<br>
<b>Sent:</b> 10 September 2014 09:45<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> RE: Shibboleth IdP with Webex<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Generic thought – could you not contact Webex and ask them to check their logs, with the detail you’ve given us?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I’m working on a Google Apps pairing currently, and they’ve offered to examine the headers of the handshake and investigate the issue at their end.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Dave<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">_________________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">Dave Perry<br>
eLearning Technologist, Hull College Group<br>
<br>
Room L34 - Queens Gardens Library<br>
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br>
Extension 2230 / Direct Dial 01482 381930<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">* Need a fast reply? Try
<a href="mailto:elearning@hull-college.ac.uk"><span style="color:blue">elearning@hull-college.ac.uk</span></a> *<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">
<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> [<a href="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</a>]
<b>On Behalf Of </b>Todd, James<br>
<b>Sent:</b> 10 September 2014 09:43<br>
<b>To:</b> <a href="mailto:users@shibboleth.net">users@shibboleth.net</a><br>
<b>Subject:</b> Shibboleth IdP with Webex<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">Hi Group,<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">I’d like some guidance primarily from those who have already got Shib and Webex working together here as I gather from other posts I’ve seen it’s not entirely straightforward as other setups.
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">I’ve been trying to federate with Webex using our 2.3.8 IdP, using the documentation provided by Cisco (which seems heavily geared towards helping those using ADFS) and I’m hitting a brick wall. I’ve added the
Webex metadata, I’ve pulled together the required attributes in the resolver (uid, email, firstname, lastname) and configured a webex nameid and used the uid for that. I’ve configured the attribute filter to remove all the unwanted attributes we usually release
as default for other SPs. I’ve configured the webex side to point at our IdP, I’ve added our IdP metadata and all that good stuff.<o:p></o:p></p>
<p style="margin-left:36.0pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">So when it comes to Webex login it correctly redirects to our IdP and our IdP redirects back to Webex, from the logs I can see the attributes I want sent are being
sent - but webex fails to login with the error “<b><span style="color:red">Reason:
</span></b><span style="color:red">Invalid Response message (29)” </span>obviously that means that something’s wrong with my assertion but the documentation is of no help and as I’ve already said geared heavily to an ADFS implementation.<o:p></o:p></span></p>
<p style="margin-left:36.0pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">So, has anybody already successfully done this, and do they have any pointers?<o:p></o:p></span></p>
<p style="margin-left:36.0pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Cheers<o:p></o:p></span></p>
<p style="margin-left:36.0pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">James</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
<b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">_____________________________________<br>
James Todd</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"> | Data Centre & Operations Analyst</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:36.0pt">
<b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Edinburgh Napier University</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"><br>
Craiglockhart Campus<br>
Edinburgh<br>
EH14 1DJ</span><span style="color:black;mso-fareast-language:EN-GB"> </span><span style="font-size:12.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:36.0pt">
<span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Tel: 0131 455 4313<br>
Email: <a href="mailto:j.todd@napier.ac.uk" target="_blank"><span style="color:blue">j.todd@napier.ac.uk</span></a></span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span style="font-size:10.0pt;color:red;mso-fareast-language:EN-GB">** IT Support is now available 24 hrs a day, 365 days of the year **<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">For Help and Advice on any of our IT services please visit:<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">Staff Intranet:
<span style="color:#1F497D"><a href="http://staff.napier.ac.uk/services/cit/Pages/info-services.aspx"><span style="color:blue">http://staff.napier.ac.uk/services/cit/Pages/info-services.aspx</span></a><o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">Student Portal:
<span style="color:#1F497D"><a href="https://studentportal.napier.ac.uk/citservices/default.aspx"><span style="color:blue">https://studentportal.napier.ac.uk/citservices/default.aspx</span></a><o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><img border="0" width="113" height="163" id="Picture_x0020_1" src="cid:image001.jpg@01CFCCDC.A21CEDB0" alt="CSE logo 2014"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB">
<hr size="2" width="100%" align="center">
</span></div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#999999;mso-fareast-language:EN-GB">This message is sent in confidence for the addressee only. It may contain confidential or sensitive information. The contents are
not to be disclosed to anyone other than the addressee. Unauthorised recipients are requested to preserve this confidentiality and to advise us of any errors in transmission. Any views expressed in this message are solely the views of the individual and
do not represent the views of the College. Nothing in this message should be construed as creating a contract.</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#999999;mso-fareast-language:EN-GB">Hull College owns the email infrastructure, including the contents.</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#00CC33;mso-fareast-language:EN-GB">Hull College is committed to sustainability, please reflect before printing this email.</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-GB">
<hr size="2" width="100%" align="center">
</span></div>
</div>
</div>
</body>
</html>