<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">We have had Identity Manager for years, to sit between our MIS system (QL) and AD. We still have some Novell servers left (mainly shared drives), and some SLES
VMs (including our retired and live IdPs) but gradually the non-SLES servers are being phased out in favour of ADFS for storage.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Our Shibboleth IdP now talks exclusively to one of two AD controls (I have 2 setup in the config). As does moodle and all our other web servers that use network
authentication.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">We also have SSPR, integrated into our desktop build as well as via an externally-available web page.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">HTH,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Dave<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">_________________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">Dave Perry<br>
eLearning Technologist, Hull College Group<br>
<br>
Room L34 - Queens Gardens Library<br>
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br>
Extension 2230 / Direct Dial 01482 381930<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">* Need a fast reply? Try
<a href="mailto:elearning@hull-college.ac.uk"><span style="color:blue">elearning@hull-college.ac.uk</span></a> *<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>David Gersic<br>
<b>Sent:</b> 15 February 2016 15:24<br>
<b>To:</b> Users Shib<br>
<b>Subject:</b> Re: Novell/NetIQ IDM and Shibboleth<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<div id="divtagdefaultwrapper">
<p style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">NIU is a long time user of MicroFocus (was NetIQ, was Novell) eDirectory and Identity Manager. We're also using Shibboleth here. They go quite well together,
IMHO. We aren't using OSP here, but a friend has written an article on how to get OSP to work with Shibboleth (<a href="https://www.netiq.com/communities/cool-solutions/configuring-idm-4-5s-osp-talk-shibboleth-idp/" title="Ctrl+Click or tap to follow the link" id="LPlnk438095">https://www.netiq.com/communities/cool-solutions/configuring-idm-4-5s-osp-talk-shibboleth-idp/</a>),
so maybe that's an option for you.<o:p></o:p></span></p>
<p style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">We are using the open source (Pwm) password manager, not SSPR. They're pretty close to the same thing, but I was using Pwm before SSPR became available,
and haven't had the time or desire to look in to changing something that's working just for the sake of changing it.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt;background:white">
<span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<div>
<div class="MsoNormal" align="center" style="margin-left:36.0pt;text-align:center;background:white">
<span style="font-family:"Calibri","sans-serif";color:black">
<hr size="2" width="98%" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black"> users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>>
on behalf of Schwoerer, Brad <<a href="mailto:schwoerb@uww.edu">schwoerb@uww.edu</a>><br>
<b>Sent:</b> Friday, February 12, 2016 12:38 PM<br>
<b>To:</b> Users Shib<br>
<b>Subject:</b> Novell/NetIQ IDM and Shibboleth</span><span style="font-family:"Calibri","sans-serif";color:black">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">I was curious how many institutions use NetIQ IDM products and also have Shibboleth as their IDP. The reason I am asking is, we use
some of their products and one of their products (OSP) that make use of SAML2 does not work with a Shibboleth IDP, and I am looking for others that can help persuade them to support more than NetIQ Access Manager as a SAML2 IdP.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">Also, I am curious if others are looking at integrating with SSPR for password expiration checking as well as the other checks it can
do.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">If people can respond off list, that would be great. Thanks.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt;background:white"><span style="font-family:"Calibri","sans-serif";color:black">-Bradley<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<font color="#999999" size="2">
<span style="font-family: Arial;"><a href="http://www.hull-college.ac.uk/about-us/stakeholders-newsletter">The Review Newsletter</a></span> </font></div><div><font color="#999999" size="2"><br />
<font face="Arial">This message is sent in confidence for the addressee </font>
<span style="font-family: Arial;">only. It may contain confidential or sensitive </span>
<span style="font-family: Arial;">information. The contents are not to be disclosed </span>
<span style="font-family: Arial;">to anyone other than the addressee. Unauthorised </span>
<span style="font-family: Arial;">recipients are requested to preserve this </span>
<span style="font-family: Arial;">confidentiality and to advise us of any errors in </span>
<span style="font-family: Arial;">transmission. Any views expressed in this message </span>
<span style="font-family: Arial;">are solely the views of the individual and do not </span>
<span style="font-family: Arial;">represent the views of the College. Nothing in this </span>
<span style="font-family: Arial;">message should be construed as creating a contract.</span>
</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">
<br />
</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">Hull College Group owns the email infrastructure, including the contents.</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">
<br />
</font>
</div>
<div>
<font face="Arial" size="2" color="#00CC33">Hull College Group is committed to sustainability, please reflect before printing
this email.</font>
</div>
<div>
<hr />
</div>
</body>
</html>