<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jun 1, 2015 at 9:05 AM, Cahill, Charles (GE Appliances) <span dir="ltr"><<a href="mailto:Charles.Cahill@ge.com" target="_blank">Charles.Cahill@ge.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Okay,  am I supposed to generate some fake metadata to put in on the shib IDP side since I cannot get any out<br>
of PagerDuty?<br>
<span class="im"><br></span></blockquote><div>I believe so, yes.  If they don't provide a certificate, you may also need to include a custom relying-party config for them.</div><div><br></div><div><p class=""><span class=""><!-- VendorX provides no metadata or cert, so fake it  --></span></p><p class=""><span class=""><EntityDescriptor entityID="<a href="https://X">https://X</a></span><span class="">.com" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"></span></p>
<p class=""><span class="">   <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"></span></p>
<p class=""><span class="">        <md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"></span></p>
<p class=""><span class="">        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"></span></p>
<p class=""><span class="">        <mdui:DisplayName xml:lang="en">Vendor X Service</mdui:DisplayName></span></p>
<p class=""><span class="">        </mdui:UIInfo></span></p>
<p class=""><span class="">        </md:Extensions></span></p>
<p class=""><span class="">       <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat></span></p>
<p class=""><span class="">       <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></p>
<p class=""><span class="">           Location="{They will have to give you this much - a URL}"</span><span class=""> /></span></p>
<p class=""><span class="">   </SPSSODescriptor></span></p>
<p class=""><span class=""></EntityDescriptor></span></p></div><div>







<p class=""><span class="">in relying-party.xml (Shibb 2):</span></p><p class=""><span class=""><!-- VendorX provides no metadata or cert, so disable encryption  --></span></p>
<p class=""><span class="">   <RelyingParty id="<a href="https://X.com">https://X.com</a>"<br></span>       provider={yourEntityID}<br>       defaultSigningCredentialRef="IdPCredential"<br>      defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport">      <ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never" encryptNameIds="never" /><br>   </RelyingParty></p></div><div> </div></div></div></div>