<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Thank you all for your assistance – Andrew Martin provided some assistance off-list and some further tweaks mean I now have a working federated login with auto-account create. All down to encryption of assertions
in the end.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Cheers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">James<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">_____________________________________<br>
James Todd</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"> | Data Centre & Operations Analyst</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Edinburgh Napier University</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"><br>
Craiglockhart Campus<br>
Edinburgh<br>
EH14 1DJ</span><span style="color:black;mso-fareast-language:EN-GB"> </span><span style="font-size:12.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Tel: 0131 455 4313<br>
Email: <a href="mailto:j.todd@napier.ac.uk" target="_blank"><span style="color:blue">j.todd@napier.ac.uk</span></a></span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="mso-fareast-language:EN-GB"> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Todd, James<br>
<b>Sent:</b> 10 September 2014 09:43<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Shibboleth IdP with Webex<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi Group,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’d like some guidance primarily from those who have already got Shib and Webex working together here as I gather from other posts I’ve seen it’s not entirely straightforward as other setups.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve been trying to federate with Webex using our 2.3.8 IdP, using the documentation provided by Cisco (which seems heavily geared towards helping those using ADFS) and I’m hitting a brick wall. I’ve added the Webex metadata, I’ve pulled
together the required attributes in the resolver (uid, email, firstname, lastname) and configured a webex nameid and used the uid for that. I’ve configured the attribute filter to remove all the unwanted attributes we usually release as default for other SPs.
I’ve configured the webex side to point at our IdP, I’ve added our IdP metadata and all that good stuff.<o:p></o:p></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">So when it comes to Webex login it correctly redirects to our IdP and our IdP redirects back to Webex, from the logs I can see the attributes I want sent are being sent - but webex fails to
login with the error “<b><span style="color:red">Reason: </span></b><span style="color:red">Invalid Response message (29)”
</span>obviously that means that something’s wrong with my assertion but the documentation is of no help and as I’ve already said geared heavily to an ADFS implementation.<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">So, has anybody already successfully done this, and do they have any pointers?<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Cheers<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">James</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">_____________________________________<br>
James Todd</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"> | Data Centre & Operations Analyst</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Edinburgh Napier University</span></b><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB"><br>
Craiglockhart Campus<br>
Edinburgh<br>
EH14 1DJ</span><span style="color:black;mso-fareast-language:EN-GB"> </span><span style="font-size:12.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;color:navy;mso-fareast-language:EN-GB">Tel: 0131 455 4313<br>
Email: <a href="mailto:j.todd@napier.ac.uk" target="_blank"><span style="color:blue">j.todd@napier.ac.uk</span></a></span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:red;mso-fareast-language:EN-GB">** IT Support is now available 24 hrs a day, 365 days of the year **<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">For Help and Advice on any of our IT services please visit:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">Staff Intranet:
<span style="color:#1F497D"><a href="http://staff.napier.ac.uk/services/cit/Pages/info-services.aspx"><span style="color:blue">http://staff.napier.ac.uk/services/cit/Pages/info-services.aspx</span></a><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB">Student Portal:
<span style="color:#1F497D"><a href="https://studentportal.napier.ac.uk/citservices/default.aspx"><span style="color:blue">https://studentportal.napier.ac.uk/citservices/default.aspx</span></a><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-GB"><img border="0" width="113" height="163" id="Picture_x0020_1" src="cid:image001.jpg@01CFCDB7.0F38BE80" alt="CSE logo 2014"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>