<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Here’s the config that has been modified from the defaults:</div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><div><font face="Courier" style="font-size: 12px;"><b><u>[root@dev1 conf]# more attribute-resolver.xml</u></b></font></div><div><font face="Courier" style="font-size: 12px;"><?xml version="1.0" encoding="UTF-8"?></font></div><div><font face="Courier" style="font-size: 12px;"><resolver:AttributeResolver</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:resolver="urn:mace:shibboleth:2.0:resolver"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:sec="urn:mace:shibboleth:2.0:security"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:resolver:pc <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-pc.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-pc.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:resolver:ad <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-ad.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-ad.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:resolver:dc <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-dc.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-dc.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:attribute:encoder <a href="http://shibboleth.net/schema/idp/shibboleth-attribute-encoder.xsd">http://shibboleth.net/schema/idp/shibboleth-attribute-encoder.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:security <a href="http://shibboleth.net/schema/idp/shibboleth-security.xsd"">http://shibboleth.net/schema/idp/shibboleth-security.xsd"</a>></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="ad:Scoped" scope="%{idp.scope}" sourceAttributeID="uid"></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:Dependency ref="uid" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonPrincipalName" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:AttributeDefinition></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeDefinition id="uid" xsi:type="ad:PrincipalName"></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:AttributeDefinition></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeDefinition id="mail" xsi:type="ad:Template"></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:Dependency ref="uid" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> <ad:Template></font></div><div><font face="Courier" style="font-size: 12px;"> <![CDATA[</font></div><div><font face="Courier" style="font-size: 12px;"> ${uid}@jseppa.com</font></div><div><font face="Courier" style="font-size: 12px;"> ]]></font></div><div><font face="Courier" style="font-size: 12px;"> </ad:Template></font></div><div><font face="Courier" style="font-size: 12px;"> <ad:SourceAttribute>uid</ad:SourceAttribute></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:AttributeDefinition></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeDefinition id="eduPersonScopedAffiliation" xsi:type="ad:Scoped" scope="%{idp.scope}" sourceAttributeID="affiliation"></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:Dependency ref="staticAttributes" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" friendlyName="eduPersonScopedAffiliation" encodeType="false" /></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:AttributeDefinition></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:DataConnector id="staticAttributes" xsi:type="dc:Static"></font></div><div><font face="Courier" style="font-size: 12px;"> <dc:Attribute id="affiliation"></font></div><div><font face="Courier" style="font-size: 12px;"> <dc:Value>member</dc:Value></font></div><div><font face="Courier" style="font-size: 12px;"> </dc:Attribute></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:DataConnector></font></div><div><br></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeDefinition xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"</font></div><div><font face="Courier" style="font-size: 12px;"> id="googleNameID"</font></div><div><font face="Courier" style="font-size: 12px;"> sourceAttributeID="mail"></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:Dependency ref="ldap" /></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"</font></div><div><font face="Courier" style="font-size: 12px;"> nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:AttributeDefinition></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <resolver:DataConnector id="ldap" xsi:type="dc:LDAPDirectory"</font></div><div><font face="Courier" style="font-size: 12px;"> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"</font></div><div><font face="Courier" style="font-size: 12px;"> baseDN="%{idp.attribute.resolver.LDAP.baseDN}"</font></div><div><font face="Courier" style="font-size: 12px;"> principal="%{idp.attribute.resolver.LDAP.bindDN}"</font></div><div><font face="Courier" style="font-size: 12px;"> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"></font></div><div><font face="Courier" style="font-size: 12px;"> <dc:FilterTemplate></font></div><div><font face="Courier" style="font-size: 12px;"> <![CDATA[</font></div><div><font face="Courier" style="font-size: 12px;"> %{idp.attribute.resolver.LDAP.searchFilter}</font></div><div><font face="Courier" style="font-size: 12px;"> ]]></font></div><div><font face="Courier" style="font-size: 12px;"> </dc:FilterTemplate></font></div><div><font face="Courier" style="font-size: 12px;"> </resolver:DataConnector></font></div><div><span style="font-size: 12px; font-family: Courier;"></resolver:AttributeResolver></span></div></div><div><br></div><div><br></div><div><br></div><div><div><font face="Courier" style="font-size: 12px;"><b><u>[root@dev1 conf]# more attribute-filter.xml</u></b></font></div><div><font face="Courier" style="font-size: 12px;"><?xml version="1.0" encoding="UTF-8"?></font></div><div><font face="Courier" style="font-size: 12px;"><afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:afp="urn:mace:shibboleth:2.0:afp"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xsi:schemaLocation="urn:mace:shibboleth:2.0:afp <a href="http://shibboleth.net/schema/idp/shibboleth-afp.xsd">http://shibboleth.net/schema/idp/shibboleth-afp.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:afp:mf:basic <a href="http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd">http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> urn:mace:shibboleth:2.0:afp:mf:saml <a href="http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd"">http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd"</a>></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:AttributeFilterPolicy id="google.com/a/jseppa.com"></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="google.com/a/jseppa.com" /></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:AttributeRule attributeID="googleNameID"></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:PermitValueRule xsi:type="basic:ANY" /></font></div><div><font face="Courier" style="font-size: 12px;"> </afp:AttributeRule></font></div><div><font face="Courier" style="font-size: 12px;"> </afp:AttributeFilterPolicy></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone"></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:PolicyRequirementRule xsi:type="basic:NOT"></font></div><div><font face="Courier" style="font-size: 12px;"> <basic:Rule xsi:type="basic:AttributeRequesterString" value="google.com" /></font></div><div><font face="Courier" style="font-size: 12px;"> </afp:PolicyRequirementRule></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:AttributeRule attributeID="transientId"></font></div><div><font face="Courier" style="font-size: 12px;"> <afp:PermitValueRule xsi:type="basic:ANY" /></font></div><div><font face="Courier" style="font-size: 12px;"> </afp:AttributeRule></font></div><div><font face="Courier" style="font-size: 12px;"> </afp:AttributeFilterPolicy></font></div><div><font face="Courier" style="font-size: 12px;"></afp:AttributeFilterPolicyGroup></font></div></div><div><br></div><div><br></div><div><br></div><div><div><font face="Courier" style="font-size: 12px;"><u><b>[root@dev1 conf]# more ../metadata/google-metadata.xml</b></u></font></div><div><font face="Courier" style="font-size: 12px;"><EntityDescriptor entityID="google.com/a/jseppa.com" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"></font></div><div><font face="Courier" style="font-size: 12px;"> <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"></font></div><div><font face="Courier" style="font-size: 12px;"> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat></font></div><div><font face="Courier" style="font-size: 12px;"> <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</font></div><div><font face="Courier" style="font-size: 12px;"> Location="<a href="https://www.google.com/a/jseppa.com/acs">https://www.google.com/a/jseppa.com/acs</a>" /></font></div><div><font face="Courier" style="font-size: 12px;"> </SPSSODescriptor></font></div><div><font face="Courier" style="font-size: 12px;"></EntityDescriptor></font></div></div><div><br></div><div><br></div><div><br></div><div><div><font face="Courier" style="font-size: 12px;"><b><u>[root@dev1 conf]# egrep "^idp" idp.properties</u></b></font></div><div><font face="Courier" style="font-size: 12px;">idp.additionalProperties= /conf/ldap.properties, /conf/saml-nameid.properties, /conf/services.properties</font></div><div><font face="Courier" style="font-size: 12px;">idp.entityID= <a href="https://sso.jseppa.com/idp/shibboleth">https://sso.jseppa.com/idp/shibboleth</a></font></div><div><font face="Courier" style="font-size: 12px;">idp.scope= jseppa.com</font></div><div><font face="Courier" style="font-size: 12px;">idp.sealer.storeResource= %{idp.home}/credentials/sealer.jks</font></div><div><font face="Courier" style="font-size: 12px;">idp.sealer.versionResource= %{idp.home}/credentials/sealer.kver</font></div><div><font face="Courier" style="font-size: 12px;">idp.sealer.storePassword= xxxxxxx</font></div><div><font face="Courier" style="font-size: 12px;">idp.sealer.keyPassword= xxxxxxx</font></div><div><font face="Courier" style="font-size: 12px;">idp.signing.key= %{idp.home}/credentials/idp-signing.key</font></div><div><font face="Courier" style="font-size: 12px;">idp.signing.cert= %{idp.home}/credentials/idp-signing.crt</font></div><div><font face="Courier" style="font-size: 12px;">idp.encryption.key= %{idp.home}/credentials/idp-encryption.key</font></div><div><font face="Courier" style="font-size: 12px;">idp.encryption.cert= %{idp.home}/credentials/idp-encryption.crt</font></div><div><font face="Courier" style="font-size: 12px;">idp.encryption.optional = true</font></div><div><font face="Courier" style="font-size: 12px;">idp.session.enabled = true</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.flows= Password</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.flows.initial = Password</font></div><div><font face="Courier" style="font-size: 12px;">idp.status.accessPolicy= AccessByIPAddress</font></div><div><font face="Courier" style="font-size: 12px;">idp.resolvertest.accessPolicy= AccessByIPAddress</font></div><div><font face="Courier" style="font-size: 12px;">idp.reload.accessPolicy= AccessByIPAddress</font></div><div><font face="Courier" style="font-size: 12px;">idp.ui.fallbackLanguages= en,fr,de</font></div></div><div><br></div><div><br></div><div><br></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><div><font face="Courier" style="font-size: 12px;"><u><b>[root@dev1 conf]# egrep "^idp" ldap.properties</b></u></font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.authenticator = bindSearchAuthenticator</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.ldapURL = ldap://localhost:389</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.useStartTLS = false</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.useSSL = false</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.connectTimeout = 3000</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.sslConfig = jvmTrust</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.trustCertificates = %{idp.home}/credentials/ldap-server.crt</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.trustStore = %{idp.home}/credentials/ldap-server.truststore</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.returnAttributes = cn,businessCategory,mail</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.baseDN = ou=Users,dc=jseppa,dc=com</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.subtreeSearch = true</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.userFilter = (uid={user})</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.bindDN = cn=Manager,dc=jseppa,dc=com</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.bindDNCredential = xxxxxxx</font></div><div><font face="Courier" style="font-size: 12px;">idp.authn.LDAP.dnFormat = uid=%s,ou=Users,dc=jseppa,dc=com</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.ldapURL = %{idp.authn.LDAP.ldapURL}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.baseDN = %{idp.authn.LDAP.baseDN}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.bindDN = %{idp.authn.LDAP.bindDN}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.bindDNCredential = %{idp.authn.LDAP.bindDNCredential}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.useStartTLS = %{idp.authn.LDAP.useStartTLS:true}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.trustCertificates = %{idp.authn.LDAP.trustCertificates}</font></div><div><font face="Courier" style="font-size: 12px;">idp.attribute.resolver.LDAP.searchFilter = (uid=$requestContext.principalName)</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.minSize = 3</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.maxSize = 10</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.validateOnCheckout = false</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.validatePeriodically = true</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.validatePeriod = 300</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.prunePeriod = 300</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.idleTime = 600</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.blockWaitTime = 3000</font></div><div><font face="Courier" style="font-size: 12px;">idp.pool.LDAP.failFastInitialize = false</font></div></div><div><br></div><div><br></div><div><br></div><div><div><font face="Courier" style="font-size: 12px;"><u><b>[root@dev1 conf]# cat saml-nameid.xml</b></u></font></div><div><font face="Courier" style="font-size: 12px;"><?xml version="1.0" encoding="UTF-8"?></font></div><div><font face="Courier" style="font-size: 12px;"><beans xmlns="<a href="http://www.springframework.org/schema/beans">http://www.springframework.org/schema/beans</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:context="<a href="http://www.springframework.org/schema/context">http://www.springframework.org/schema/context</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:util="<a href="http://www.springframework.org/schema/util">http://www.springframework.org/schema/util</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:p="<a href="http://www.springframework.org/schema/p">http://www.springframework.org/schema/p</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:c="<a href="http://www.springframework.org/schema/c">http://www.springframework.org/schema/c</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> xsi:schemaLocation="<a href="http://www.springframework.org/schema/beans">http://www.springframework.org/schema/beans</a> <a href="http://www.springframework.org/schema/beans/spring-beans.xsd">http://www.springframework.org/schema/beans/spring-beans.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> <a href="http://www.springframework.org/schema/context">http://www.springframework.org/schema/context</a> <a href="http://www.springframework.org/schema/context/spring-context.xsd">http://www.springframework.org/schema/context/spring-context.xsd</a></font></div><div><font face="Courier" style="font-size: 12px;"> <a href="http://www.springframework.org/schema/util">http://www.springframework.org/schema/util</a> <a href="http://www.springframework.org/schema/util/spring-util.xsd">http://www.springframework.org/schema/util/spring-util.xsd</a>"</font></div><div><font face="Courier" style="font-size: 12px;"> default-init-method="initialize"</font></div><div><font face="Courier" style="font-size: 12px;"> default-destroy-method="destroy"></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <util:list id="shibboleth.SAML1NameIdentifierGenerators"></font></div><div><font face="Courier" style="font-size: 12px;"> <ref bean="shibboleth.SAML1TransientGenerator" /></font></div><div><font face="Courier" style="font-size: 12px;"> <!--</font></div><div><font face="Courier" style="font-size: 12px;"> <bean parent="shibboleth.SAML1AttributeSourcedGenerator"</font></div><div><font face="Courier" style="font-size: 12px;"> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"</font></div><div><font face="Courier" style="font-size: 12px;"> p:attributeSourceIds="#{ {'mail'} }" /></font></div><div><font face="Courier" style="font-size: 12px;"> --></font></div><div><font face="Courier" style="font-size: 12px;"> </util:list></font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;"> <util:list id="shibboleth.SAML2NameIDGenerators"></font></div><div><font face="Courier" style="font-size: 12px;"> <ref bean="shibboleth.SAML2TransientGenerator" /></font></div><div><font face="Courier" style="font-size: 12px;"> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"</font></div><div><font face="Courier" style="font-size: 12px;"> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</font></div><div><font face="Courier" style="font-size: 12px;"> p:attributeSourceIds="#{ {'googleNameID'} }" /></font></div><div><font face="Courier" style="font-size: 12px;"> </util:list></font></div><div><font face="Courier" style="font-size: 12px;"></beans></font></div></div><div><br></div><div><br></div><div><br></div><div><div><b><font face="Courier" style="font-size: 12px;"><u>[root@dev1 jetty]# more start.ini</u></font></b></div><div><span style="font-size: 12px; font-family: Courier;">-Xmx512m</span></div><div><font face="Courier" style="font-size: 12px;">-XX:MaxPermSize=128m</font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;">jetty.threadPool.minThreads=10</font></div><div><font face="Courier" style="font-size: 12px;">jetty.threadPool.maxThreads=200</font></div><div><font face="Courier" style="font-size: 12px;">jetty.threadPool.idleTimeout=60000</font></div><div><font face="Courier" style="font-size: 12px;">jetty.httpConfig.secureScheme=https</font></div><div><font face="Courier" style="font-size: 12px;">jetty.httpConfig.securePort=443</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.outputBufferSize=32768</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.outputAggregationSize=8192</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.requestHeaderSize=8192</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.responseHeaderSize=8192</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.sendServerVersion=true</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.sendDateHeader=false</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.headerCacheSize=512</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.httpConfig.delayDispatchUntilContent=true</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.server.stopAtShutdown=true</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.server.dumpAfterStart=false</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.server.dumpBeforeStop=false</font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;">jetty.http.host=0.0.0.0</font></div><div><font face="Courier" style="font-size: 12px;">jetty.http.port=80</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.idleTimeout=30000</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.soLingerTime=-1</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.acceptors=-1</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.selectors=-1</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.acceptorQueueSize=0</font></div><div><font face="Courier" style="font-size: 12px;"># jetty.http.acceptorPriorityDelta=0</font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;">jetty.deploy.monitoredDir=webapps</font></div><div><font face="Courier" style="font-size: 12px;">jetty.deploy.scanInterval=5</font></div><div><font face="Courier" style="font-size: 12px;">jetty.deploy.extractWars=true</font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;">--module=home-base-warning</font></div><div><font face="Courier" style="font-size: 12px;">--module=ext</font></div><div><font face="Courier" style="font-size: 12px;">--module=resources</font></div><div><font face="Courier" style="font-size: 12px;">--module=server</font></div><div><font face="Courier" style="font-size: 12px;">--module=http</font></div><div><font face="Courier" style="font-size: 12px;">--module=deploy</font></div><div><font face="Courier" style="font-size: 12px;">--module=jsp</font></div><div><font face="Courier" style="font-size: 12px;">--module=websocket</font></div><div><font face="Courier" style="font-size: 12px;">--module=jstl</font></div><div><font face="Courier" style="font-size: 12px;">--module=plus</font></div><div><font face="Courier" style="font-size: 12px;">--module=servlets</font></div><div><span style="font-size: 12px; font-family: Courier;">--module=annotations</span></div><div><span style="font-size: 12px; font-family: Courier;">--module=logging</span></div><div><font face="Courier" style="font-size: 12px;">--module=requestlog</font></div><div><font face="Courier" style="font-size: 12px;">--module=jaas</font></div><div><font face="Courier" style="font-size: 12px;">--module=security</font></div><div><font face="Courier" style="font-size: 12px;"><br></font></div><div><font face="Courier" style="font-size: 12px;">etc/jetty-ssl-context.xml</font></div><div><font face="Courier" style="font-size: 12px;">etc/jetty-ssl.xml</font></div><div><font face="Courier" style="font-size: 12px;">etc/jetty-https.xml</font></div><div><br></div></div><div><br></div><div><br></div><div><div><u><b>Software Versions</b></u></div><div>IDP 3.1.2</div><div><div>java version "1.8.0_51"</div><div><i>JCE unlimited installed:</i></div><div>jetty-9.3.1.v20150714 - 14 July 2015</div><div>Centos 6.5</div><div><span style="font-family: Consolas;">openldap 2.4.39-8.el6</span></div></div><div><br></div></div><div><br></div><div><br></div><div><div><b>[root@dev1 bin]# ./aacli.sh --requester google.com/a/jseppa.com --principal jason</b></div><div><br></div><div>{</div><div>"requester": "google.com/a/jseppa.com",</div><div>"principal": "jason",</div><div>"attributes": [</div><div><br></div><div><br></div><div> {</div><div> "name": "googleNameID",</div><div> "values": [</div><div> "StringAttributeValue{<a href="mailto:value=jason@jseppa.com">value=jason@jseppa.com</a>}" ]</div><div> }</div><div><br></div><div>]</div><div>}</div></div><div><br></div><div>Any hints on where to look next would be greatly appreciated? There is clearly no ldap client request being made at all when I enter user/pass into the login form.</div><div><br></div></body></html>