<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Webdings;
panose-1:5 3 1 2 1 5 9 6 7 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are integrating 5 WebEx sites with our IDP. They all have individual metadata and for each metadata, the entity ID is the same (<a href="https://www.webex.com">https://www.webex.com</a>). I’ve never done a setup like this before and
want some advice on whether or not I’m doing this correctly. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I created a metadata file for each site and added the following configuration to relying-party.xml:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><!-- webex --><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><RelyingParty id="https://www.webex.com"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> provider="https://fim.temple.edu/idp/shibboleth"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> defaultSigningCredentialRef="IdPCredential"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never" encryptNameIds="never" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"></RelyingParty><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><!-- Webex --><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> id="webexfox" metadataFile="/opt/shibboleth-idp/metadata/webex_foxsbm_metadata.xml" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> id="webextu" metadataFile="/opt/shibboleth-idp/metadata/webex_templeuniversity_metadata.xml" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> id="webexed" metadataFile="/opt/shibboleth-idp/metadata/webex_tueducation_metadata.xml" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> id="webexlaw" metadataFile="/opt/shibboleth-idp/metadata/webex_tulaw_metadata.xml" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> id="webexstudents" metadataFile="/opt/shibboleth-idp/metadata/webex_tustudents_metadata.xml" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Then I added the appropriate config to attribute-filters.xml:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><!-- Webex --><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><afp:AttributeFilterPolicy id="releaseForWebex" ><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://www.webex.com" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:AttributeRule attributeID="webexNameId"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PermitValueRule xsi:type="basic:ANY" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </afp:AttributeRule><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:AttributeRule attributeID="uid"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PermitValueRule xsi:type="basic:ANY" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </afp:AttributeRule><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:AttributeRule attributeID="email"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PermitValueRule xsi:type="basic:ANY" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </afp:AttributeRule><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:AttributeRule attributeID="lastname"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PermitValueRule xsi:type="basic:ANY" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </afp:AttributeRule><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:AttributeRule attributeID="firstname"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <afp:PermitValueRule xsi:type="basic:ANY" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </afp:AttributeRule><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"></afp:AttributeFilterPolicy><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Has anyone ever done a similar integration or know if this is correct. If not, what can I do to make this setup work?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Drew Z. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:#1F497D">____________________________</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:#1F497D"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Drew Zebrowski</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><i><span style="color:#1F497D">Lead Identity Management Software Developer<br>
Office of Identity and Access Management<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:black">To request help from Computer Services, please visit:</span><span style="font-size:9.0pt;color:#1F5CBF">
<a href="https://tuhelp.temple.edu/"><span style="color:#1F5CBF">https://tuhelp.temple.edu</span></a></span><span style="font-size:9.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:18.0pt;font-family:Webdings;color:#007F00">P</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#007F00">
</span><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#007F00">Think before you print</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Cambria",serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">CONFIDENTIALITY STATEMENT: The information contained in this e-mail, including attachments, is the confidential information of, and/or is the property of, Temple University. The information is
intended for use solely by the individual or entity named in the e-mail. If you are not an intended recipient or you received this in error, then any review, printing, copying, or distribution of any such information is prohibited. Please notify the sender
immediately by reply e-mail and then delete this e-mail from your system.</span><span style="font-size:10.0pt;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>