<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas","serif";
mso-fareast-language:EN-US;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi Tony<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The first step is to get the Shibboleth SP installed, configured and tested to work for your institution’s user – presumably your own institution’s IdP (read login server) administrators can help with the testing
logins bit.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Get a list of ‘required’ attributes together for the other institution users too – e.g, our own IdP releases a unique ID (hashed from the username) and affiliation information (Staff or Student)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Once it works in house, you should probably get the SP published in the UK Federation metadata (UKF may chime on this point due it being ‘just’ 6 other universities you need to allow access to).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">If it’s registered in the federation, the other universities’ IdPs will get the ‘how to talk to your application’ information/signature stuff easily as part of a process they’re doing automatically anyway.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">You’ll then need to go back to the SP configuration, and change it to allow the institutions you’re working with’s login servers to talk to your SP. And, if applicable, make sure it’s only letting the right people
through.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">NOTE – I have no experience of this bit, so someone else will need to chime in the finer points.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Or you could just allow all IdPs to login to your app, and do some filtering within the webapp – but I don’t know how practical that is, for your app.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">HTH,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Dave<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">_________________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">Dave Perry<br>
eLearning Technologist, Hull College Group<br>
<br>
Room L34 - Queens Gardens Library<br>
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br>
Extension 2230 / Direct Dial 01482 381930<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">* Need a fast reply? Try
<a href="mailto:elearning@hull-college.ac.uk"><span style="color:blue">elearning@hull-college.ac.uk</span></a> *<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">
users [mailto:users-bounces@shibboleth.net] <b>On Behalf Of </b>Tony Wheatman<br>
<b>Sent:</b> 13 August 2015 14:45<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Support in setting up a Shibboleth SP<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">Hello,<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">Sorry for just dropping this e-mail upon you but I hope you can help with a Shibboleth SP implementation we are undertaking at the University of Nottingham (United Kingdom).<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">I am the project manager and we are undertaking a project around a Confluence Workspace site that hosts something called the Virtual Postgraduate Platform.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">The VPP is used by a consortia of 6 universities and currently the user experience is poor due to an authentication method which means associate accounts being set up for each user so that they have access to
the site hosted at UoN from the other institutions. Resulting in several accounts for each user, which is far from ideal.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">We have been in negotiation around making this a shibbolized (I hope that is the correct terminology !) solution, allowing single sign on based on the sharing of attributes from each University and the setup of
the UoN as a Service Provider.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">We have now opted for this as a solution, but we are struggling with resource at the moment and the deadline of the 21st September, could be at risk. I am therefore reaching out to you for support and to understand
what support is out there, what the availability is like and what if any, the cost would be.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">I have spoken to Alex at the UKFederation, who has suggested that this may be a good forum to seek assistance.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">What I’m looking for is;<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">- General guidance on how to do this<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">- A list of tasks that need to be completed
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">- Associated timescales<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">- Potential 3rd party resources to draft in the expertise<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">If you can help on any aspect of this I would appreciate it greatly I’m looking at every way possible at the moment to ensure successful delivery as we believe that we do not have the necessary skills in house.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">Many thanks,<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">Tony<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-align:justify"><b><span style="font-size:12.0pt;font-family:"Arial","sans-serif";color:#003366;mso-fareast-language:EN-GB">Tony Wheatman</span></b><span style="font-family:"Times New Roman","serif";color:#003366;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-align:justify"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#665C55;mso-fareast-language:EN-GB">Senior Project Manager<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#665C55;mso-fareast-language:EN-GB">Information Services
<br>
The University of Nottingham</span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#665C55;mso-fareast-language:EN-GB">Kings Meadow Campus</span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#003366;mso-fareast-language:EN-GB">t:</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#665C55;mso-fareast-language:EN-GB"> +44
(0) 115 84 68613</span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#003366;mso-fareast-language:EN-GB">w:</span></b><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB">
</span><u><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#665C55;mso-fareast-language:EN-GB"><a href="http://nottingham.ac.uk/"><span style="color:#665C55">nottingham.ac.uk</span></a></span></u><span style="font-family:"Times New Roman","serif";color:#665C55;mso-fareast-language:EN-GB">
</span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-align:justify"><b><span style="font-family:"Arial","sans-serif";color:#003366;mso-fareast-language:EN-GB"> </span></b><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="DE" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#007EAB;mso-fareast-language:EN-GB">Follow us</span></b><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="http://www.facebook.com/TheUniofNottingham" target="_blank"><b><span lang="DE" style="color:#665C55">facebook</span></b><span lang="DE" style="color:#665C55">.com/TheUniofNottingham</span></a></span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="http://www.twitter.com/UniofNottingham" target="_blank"><b><span lang="DE" style="color:#665C55">twitter</span></b><span lang="DE" style="color:#665C55">.com/UniofNottingham</span></a></span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="http://www.youtube.com/nottmuniversity" target="_blank"><b><span lang="DE" style="color:#665C55">youtube</span></b><span lang="DE" style="color:#665C55">.com/nottmuniversity</span></a></span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="http://www.flickr.com/photos/uonottingham" target="_blank"><b><span lang="DE" style="color:#665C55">flickr</span></b><span lang="DE" style="color:#665C55">.com/photos/uonottingham</span></a></span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="http://www.linkedin.com/company/university-of-nottingham/" target="_blank"><b><span lang="DE" style="color:#665C55">linkedin</span></b><span lang="DE" style="color:#665C55">.com/company/university-of-nottingham</span></a></span><span style="font-family:"Times New Roman","serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black;mso-fareast-language:EN-GB"><a href="https://foursquare.com/uniofnottingham" target="_blank"><b><span lang="DE" style="color:#665C55">foursquare</span></b><span lang="DE" style="color:#665C55">.com/uniofnottingham</span></a></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<pre style="margin-left:36.0pt"><o:p> </o:p></pre>
<pre style="margin-left:36.0pt"><o:p> </o:p></pre>
<pre style="margin-left:36.0pt"><o:p> </o:p></pre>
<pre style="margin-left:36.0pt">This message and any attachment are intended solely for the addressee<o:p></o:p></pre>
<pre style="margin-left:36.0pt">and may contain confidential information. If you have received this<o:p></o:p></pre>
<pre style="margin-left:36.0pt">message in error, please send it back to me, and immediately delete it. <o:p></o:p></pre>
<pre style="margin-left:36.0pt"><o:p> </o:p></pre>
<pre style="margin-left:36.0pt">Please do not use, copy or disclose the information contained in this<o:p></o:p></pre>
<pre style="margin-left:36.0pt">message or in any attachment. Any views or opinions expressed by the<o:p></o:p></pre>
<pre style="margin-left:36.0pt">author of this email do not necessarily reflect the views of the<o:p></o:p></pre>
<pre style="margin-left:36.0pt">University of Nottingham.<o:p></o:p></pre>
<pre style="margin-left:36.0pt"><o:p> </o:p></pre>
<pre style="margin-left:36.0pt">This message has been checked for viruses but the contents of an<o:p></o:p></pre>
<pre style="margin-left:36.0pt">attachment may still contain software viruses which could damage your<o:p></o:p></pre>
<pre style="margin-left:36.0pt">computer system, you are advised to perform your own checks. Email<o:p></o:p></pre>
<pre style="margin-left:36.0pt">communications with the University of Nottingham may be monitored as<o:p></o:p></pre>
<pre style="margin-left:36.0pt">permitted by UK legislation.<o:p></o:p></pre>
</div>
<div><hr /></div><div><font color="#999999" size="2"><font face="Arial">This message is sent in confidence for the addressee </font><span style="font-family: Arial;">only. It may contain confidential or sensitive </span><span style="font-family: Arial;">information. The contents are not to be disclosed </span><span style="font-family: Arial;">to anyone other than the addressee. Unauthorised </span><span style="font-family: Arial;">recipients are requested to preserve this </span><span style="font-family: Arial;">confidentiality and to advise us of any errors in </span><span style="font-family: Arial;">transmission. Any views expressed in this message </span><span style="font-family: Arial;">are solely the views of the individual and do not </span><span style="font-family: Arial;">represent the views of the College. Nothing in this </span><span style="font-family: Arial;">message should be construed as creating a contract.</span></font></div><div><font face="Arial" color="#999999" size="2"><br /></font></div><div><font face="Arial" color="#999999" size="2">Hull College Group owns the email infrastructure, including the contents.</font></div><div><font face="Arial" color="#999999" size="2"><br /></font></div><div><font face="Arial" size="2" color="#00cc33">Hull College Group is committed to sustainability, please reflect before printing this email.</font></div><div><hr /></div>
</body>
</html>