<div dir="ltr">Well, this <div><br></div><div><span style="color:rgb(80,0,80);font-size:12.8px">p:attributeSourceIds="#{ {'uid', 'UDC_IDENTIFIER'} }"</span><br></div><div><br></div><div>was my attempt to get their preferred attribute name (UDC_IDENTIFIER) encoded as a NameID. I guess I made this syntax up, though... O_o</div><div><br></div><div>I did try to humor their unspecified with this bit of configuration:</div><div><br></div><div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"><bean parent=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"RelyingPartyByName"</code> <code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">c:relyingPartyIds=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"<a href="https://scroogle.com/" style="text-decoration:none;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">https://scroogle.com"</a></code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">    </code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"><property name=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"profileConfigurations"</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">        </code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"><list></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">            </code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"><bean parent=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"SAML2.SSO"</code> <code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">p:encryptAssertions=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"false"</code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">                </code><b><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">p:nameIDFormatPrecedence=</code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,51,102)!important;background:0px 50%">"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</code> </b><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%">/></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">        </code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"></list></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;background:0px 50%">    </code><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"></property></code></div><div class="" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51);background-image:initial;background-repeat:initial"><code class="" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;min-height:inherit;color:rgb(0,0,0)!important;background:0px 50%"></bean></code></div></div><div class="gmail_extra"><br></div><div class="gmail_extra">but I got errors. I should try it again, I guess. </div><div class="gmail_extra"><br></div><div class="gmail_extra">It's not abundantly clear if they would just accept an attribute as the login id (rather than a NameID proper) - which would be nice. But I'm sending that out too, so...ugh. Dealing with SCT Banner/Ellucian/whoever isn't the easiest. </div><div class="gmail_extra"><br></div><div class="gmail_extra">Thank you, and Happy Friday -</div><div class="gmail_extra">Karla</div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 10, 2016 at 4:19 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Then I put this in saml-nameid.xml:<br>
><br>
>      <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br>
>             p:format="urn:oid:0.9.2342.19200300.100.1.1"<br>
>             p:attributeSourceIds="#{ {'uid', 'UDC_IDENTIFIER'} }" /><br>
<br>
</span>Why two attributes as a source? Are there actually two?<br>
<span class=""><br>
> The instructions for getting this thing talking to an external IdP aren't<br>
> abundantly clear, since they have their own IdP and have just started<br>
> supporting talking to someone else's. (In fact, their syntax for how to return<br>
> "UDC_IDENTIFIER" with another attribute as a source were just plain wrong.)<br>
> So if anyone has got this working - especially knowing what magic parameters<br>
> to use in the ssomanager configuration - I would appreciate your advice.<br>
<br>
</span>Certainly it's possible they actually require "unspecified". I didn't say it would work, I just said it's worth trying to avoid it before falling back to that.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div style="margin-left:40px">Karla Borecky<br>Systems Administrator<br>ITS<br>Smith College<br>Northampton, MA 01063<br></div></div>
</div></div>