<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>As an example, you might see the "Concur Solutions" example in the wiki. They don't publish metadata, so you have to roll your own. Something similar will probably be what you need to do for whatever SP this is that you're working with.<br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Ben Branch <BBranch@uco.edu><br>
<b>Sent:</b> Tuesday, January 05, 2016 4:59 PM<br>
<b>To:</b> 'users@shibboleth.net'<br>
<b>Subject:</b> Unsolicited SSO with no entity ID or metadata</font>
<div> </div>
</div>
<div>
<div style="">
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
All,</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
I’ve recently been tasked with setting up SSO for a new hosted solution. We don’t have many Shibboleth based services, but once I understood how everything worked, it’s been pretty easy going. With that said, I’ve run into my first “problem child”. The vendor
in question is advising that they do not do SP-Initiated SSO and only support Idp-Initiated (unsolicited SSO). I asked them to provide me with the entity ID and the metadata and they advised that they do not publish their metadata, nor their entity ID. The
only piece of information that they were willing to provide me was the SAML endpoint. So, with that said, here are my questions:</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="text-indent: -0.25in; margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="">1.<span style="font:7.0pt "Times New Roman""> </span></span>If I don’t have the entity id or the metadata, how am I supposed to properly configure the RelyingParty?</p>
<p style="text-indent: -0.25in; margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="">2.<span style="font:7.0pt "Times New Roman""> </span></span>If I don’t have the entity id, how am supposed to configure the attributes to be released to the right service?</p>
<p style="text-indent: -0.25in; margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="">3.<span style="font:7.0pt "Times New Roman""> </span></span>Because this is Idp-Initiated SSO, do I need to build a metadata file for them on my side rather than having them provide me one?</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
I’m really at a loss right now. I’ve been pouring over the Shibboleth wiki and Google looking for anything that can help me understand Idp-Initiated SSO. There is an old post from this users list that appears to have a few pastebin links to the metadata that
the submitter used, but they have since been removed from pastebin, so I am unable to see how they configured their metadata.
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">Ben Branch<br>
UNIX/Linux Administrator</span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">University of Central Oklahoma</span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">ITIL Foundation v3, Network+, RHCE<br>
<br>
100 N. University Drive, Box 122</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">Edmond, OK 73034</span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">D: 405.974.2649 | M: 405.550.6804 |
</span><u><span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:blue"><a href="mailto:bbranch@uco."><span style="color:blue">bbranch@uco.</span></a>edu</span></u><span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">
| <a href="http://www.uco.edu/"><span style="color:blue">www.uco.edu</span></a></span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black"> </span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">“</span>I am wiser than this man, for neither of us appears to know anything great and good; but he fancies he knows something, although he knows nothing; whereas I, as I do not know
anything, so I do not fancy I do. In this trifling particular, then, I appear to be wiser than he, because I do not fancy I know what I do not know.<span style="font-size:10.0pt; font-family:"Verdana",sans-serif; color:black">” - Socrates</span><span style="color:black"></span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
</div>
</div>
</div>
</div>
</body>
</html>