<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Is this actually two separate domains in Google? Or one domain (<span id="docs-internal-guid-d9cf554c-02c5-0033-f2db-8b6b80c44182"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><a href="http://dev.mysiteA.ca">dev.mysiteA.ca</a></span></span>)
in Google with a subdomain (<span id="docs-internal-guid-d9cf554c-02c5-0033-f2db-8b6b80c44182"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><a title="Ctrl+Click or tap to follow the link" href="http://dev.mysiteB.com">dev.mysiteB.com</a></span></span>)
in it? If it's actually only one domain, then this is working correctly as designed.</p>
<p><br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users-bounces@shibboleth.net <users-bounces@shibboleth.net> on behalf of Andrew Cheung <acheung@brookfieldres.com><br>
<b>Sent:</b> Monday, January 19, 2015 9:21 AM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> SSO with multiple Google domains</font>
<div> </div>
</div>
<div>
<div dir="ltr"><span id="docs-internal-guid-d9cf554c-02c5-0033-f2db-8b6b80c44182">
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">Hi. I need help in configuring Shibboleth
for SSO to multiple Google domains. Here is my scenario :</span></p>
<div><span><br>
</span></div>
<div><font face="Arial" color="#000000"><span style="font-size:15.5555562973022px; line-height:19.1666679382324px; white-space:pre-wrap">Shibboleth version used : 2.4.3</span></font></div>
<div><font face="Arial" color="#000000"><span style="font-size:15.5555562973022px; line-height:19.1666679382324px; white-space:pre-wrap"><br>
</span></font></div>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">At Google, the primary domain is:
<a href="http://dev.mysiteA.ca">dev.mysiteA.ca</a></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">We also have a secondary domain :
<a href="http://dev.mysiteB.com">dev.mysiteB.com</a></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">We have 1 IDP set up on RHEL 6.5, on tomcat7.
We also integration with Novell eDirectory (this is our user store) using LDAP.</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">Before I did anything for the secondary domain,
the configuration that I have set up for the primary domain works and I can SSO to the primary domain works fine (I go to
</span><a href="http://mail.google.com/a/dev.mysiteA.ca" style="text-decoration:none"><span style="font-size:15px; font-family:Arial; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap; background-color:transparent">http://mail.google.com/a/dev.mysiteA.ca</span></a><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">,
put in my credentials and can log into my email account at <a href="http://dev.mysiteA.ca">
dev.mysiteA.ca</a>). </span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">Howerver, when I tried adding in the configuration
for the secondary domain (see below for the configurations), and then go to “</span><a href="http://mail.google.com/a/dev.mysiteB.com" style="text-decoration:none"><span style="font-size:15px; font-family:Arial; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap; background-color:transparent">http://mail.google.com/a/dev.mysiteB.com</span></a><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">,
I got the error “Invalid Email”. </span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">I used SAML tracer in firefox to examine
the SAML requests, and observed that the first SAML request has </span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">AssertionConsumerServiceURL="<a href="https://www.google.com/a/dev.mysiteA.ca/acs">https://www.google.com/a/dev.mysiteA.ca/acs</a>"</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">although I am trying to access
</span><a href="http://mail.google.com/dev.mysiteB.com" style="text-decoration:none"><span style="font-size:15px; font-family:Arial; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap; background-color:transparent">http://mail.google.com/dev.mysiteB.com</span></a></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">The SAML response has
</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><saml2p:Response Destination="<a href="https://www.google.com/a/dev.mysiteA.ca/acs">https://www.google.com/a/dev.mysiteA.ca/acs</a>"</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">instead of the secondary domain (<a href="http://dev.mysiteB.com">dev.mysiteB.com</a>)
as well.</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">My question is : How should I configure the
secondary domain so that users in either the primary domain or the secondary domain can SSO to their respective domains properly?</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">Any help is appreciated.</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> -Andrew</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">---------------------------------------------------------</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">The configuration I used that yields the
above behaviour is as follows:</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">attribute-filter.xml :</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><!-- Google
<a href="http://dev.mysiteA.ca">dev.mysiteA.ca</a> --></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><afp:AttributeFilterPolicy id="releaseTransientIdToAnyoneGoogleA"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PolicyRequirementRule xsi:type="basic:NOT"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <basic:Rule xsi:type="basic:AttributeRequesterString"
value="<a href="http://mail.google.com/a/dev.mysiteA.ca">mail.google.com/a/dev.mysiteA.ca</a>" /></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:PolicyRequirementRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:AttributeRule attributeID="transientId"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PermitValueRule xsi:type="basic:ANY"
/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:AttributeRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></afp:AttributeFilterPolicy></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><!-- Google dev.mysiteB.com--></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><afp:AttributeFilterPolicy id="releaseTransientIdToAnyoneGoogleB"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PolicyRequirementRule xsi:type="basic:NOT"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <basic:Rule xsi:type="basic:AttributeRequesterString"
value="<a href="http://mail.google.com/a/dev.mysiteB.com">mail.google.com/a/dev.mysiteB.com</a>" /></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:PolicyRequirementRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:AttributeRule attributeID="transientId"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PermitValueRule xsi:type="basic:ANY"
/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:AttributeRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></afp:AttributeFilterPolicy></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <!-- Google --></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><afp:AttributeFilterPolicy id="releaseGoogleNameID"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PolicyRequirementRule xsi:type="basic:NOT"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <basic:Rule xsi:type="basic:AttributeRequesterString"
value="<a href="http://google.com">google.com</a>"/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:PolicyRequirementRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:AttributeRule attributeID="GoogleNameID"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <afp:PermitValueRule xsi:type="basic:ANY"
/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </afp:AttributeRule></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></afp:AttributeFilterPolicy></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">-----------------------------</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">attribute-resolver.xml :</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><!-- Google --></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><resolver:AttributeDefinition id="GoogleNameID"
xsi:type="ad:Simple" sourceAttributeID="cn"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <resolver:Dependency ref="myLDAP" /></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier"
nameFormat="urn:mace:shibboleth:1.0:nameIdentifier"/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID"
nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></resolver:AttributeDefinition></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">….</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> ldapURL="ldap://<a href="http://1.2.3.4:389">1.2.3.4:389</a>"
</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> baseDN="ou=users,o=myCompany"
</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> principal="cn=loginuser,ou=users,o=myCompany"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> principalCredential="mypassword"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <dc:FilterTemplate></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <![CDATA[</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> (cn=$requestContext.principalName)</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> ]]></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </dc:FilterTemplate></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">---------------------------------------</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">handler.xml :</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><ph:LoginHandler xsi:type="ph:UsernamePassword"
</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> jaasConfigurationLocation="file:///opt/shibboleth-idp/conf/login.config"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </ph:LoginHandler></span></p>
<br>
<br>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">--------------------------------</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">relying-party.xml :</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true" </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> assertionLifetime="PT5M"
assertionProxyCount="0" </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> signResponses="always"
signAssertions="always" </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> encryptAssertions="never"
encryptNameIds="never"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> includeConditionsNotBefore="true"/></span></p>
<br>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><!-- Google --></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <rp:RelyingParty id="<a href="http://google.com">google.com</a>"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> provider="<a href="https://idp.mycompany.com/idp/shibboleth">https://idp.mycompany.com/idp/shibboleth</a>"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> defaultSigningCredentialRef="IdPCredential"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
encryptAssertions="never" encryptNameIds="never" /> </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></rp:RelyingParty></span></p>
<br>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><span class="" style="white-space:pre"></span></span><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><!--
Load the IdP's own metadata. This is necessary for artifact support. --></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <metadata:MetadataProvider id="IdPMD"
xsi:type="metadata:FilesystemMetadataProvider"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> metadataFile="/opt/shibboleth-idp/metadata/idp-metadata.xml"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> maxRefreshDelay="P1D"
/></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <metadata:MetadataProvider xsi:type="FilesystemMetadataProvider"
xmlns="urn:mace:shibboleth:2.0:metadata" id="GoogleMD" metadataFile="/opt/shibboleth-idp/metadata/googledev-metadata.xml" /></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <security:Credential id="IdPCredential"
xsi:type="security:X509Filesystem"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <security:PrivateKey>/opt/shibboleth-idp/credentials/idp.key</security:PrivateKey></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <security:Certificate>/opt/shibboleth-idp/credentials/idp.crt</security:Certificate></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </security:Credential></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">-----------------</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent">googledev-metadata.xml:</span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><EntityDescriptor entityID="<a href="http://google.com">google.com</a>"
xmlns="urn:oasis:names:tc:SAML:2.0:metadata"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <AssertionConsumerService index="1"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> Location="<a href="https://www.google.com/a/dev.mysiteA.ca/acs">https://www.google.com/a/dev.mysiteA.ca/acs</a>"
/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> <AssertionConsumerService index="2"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> Location="<a href="https://www.google.com/a/dev.mysiteB.com/acs">https://www.google.com/a/dev.mysiteB.com/acs</a>"
/></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </SPSSODescriptor></span></p>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"></EntityDescriptor></span></p>
<br>
<p dir="ltr" style="line-height:1.15; margin-top:0pt; margin-bottom:0pt"><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"> </span></p>
<div><span style="font-size:15px; font-family:Arial; color:rgb(0,0,0); vertical-align:baseline; white-space:pre-wrap; background-color:transparent"><br>
</span></div>
</span>
<div><br>
</div>
-- <br>
<div class="gmail_signature">
<div dir="ltr">
<p style="margin:0in 0in 0.0001pt"><b><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">Andrew Cheung</span></b><br>
</p>
<p style="margin:0in 0in 0.0001pt"><font face="Arial, sans-serif">Senior Developer</font></p>
<p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"> </span></p>
<p style="margin:0cm 0cm 0.0001pt"><b><span style="font-size:10pt; font-family:Arial,sans-serif">Royal LePage Real Estate Services / Brookfield Real Estate Services</span></b></p>
<p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">39 Wynford Drive, Toronto, ON M3C 3K5</span></p>
<p style="margin:0in 0in 0.0001pt"><b><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">T</span></b><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"> 416.510.5734 <b>V</b> 415734</span></p>
<p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">Email: acheung</span><span lang="EN-CA"><span style="font-size:10pt; font-family:Arial,sans-serif"><a href="mailto:X@royallepage.ca" target="_blank">@b</a><a href="http://rookfieldres.com" target="_blank">rookfieldres.com</a></span></span></p>
<p style="margin:0in 0in 0.0001pt"><span lang="EN-CA"><a href="http://www.royallepage.ca/" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(17,85,204)">www.royallepage.ca</span></a></span><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"></span></p>
<p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt; font-family:Arial,sans-serif"><a href="https://itunes.apple.com/ca/app/royal-lepage-canada/id810365559?mt=8" target="_blank">Download our iPhone App</a></span></p>
<p style="margin:0in 0in 0.0001pt"><br>
</p>
<p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"></span></p>
<p style="margin:0in 0in 0.0001pt"><b><i><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">Join Royal LePage on:</span></i></b><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"></span></p>
<p></p>
<span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"><a href="https://www.facebook.com/royallepage" target="_blank"><span style="color:rgb(17,85,204)">Facebook</span></a> | </span><span lang="EN-CA"><a href="http://www.linkedin.com/company/royal-lepage" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(17,85,204)">LinkedIn</span></a></span><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA">
| </span><span lang="EN-CA"><a href="https://twitter.com/royal_Lepage" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(17,85,204)">Twitter</span></a></span><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"> | </span><span lang="EN-CA"><a href="https://plus.google.com/u/0/+royallepage/posts" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(17,85,204)">Google+</span></a></span><span style="font-size:10pt; font-family:Arial,sans-serif" lang="EN-CA"> | <a href="http://www.pinterest.com/rlpcanada/" target="_blank"><span style="color:rgb(17,85,204)">Pinterest</span></a> | </span><span lang="EN-CA"><a href="https://www.youtube.com/user/RoyalLePageCanada" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(17,85,204)">YouTube</span></a></span><span lang="EN-CA"> | <a href="http://www.instagram.com/royal_lepage" target="_blank">Instagram</a></span><br>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>