<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Hi Philip,</div>
<div class=""><br class="">
</div>
<div class="">I’m curious if you’ve figured out how to get Bb Transact and IdP 3 working together? We’re just starting on connecting the two, and we’re rather lost on what to do for Bb Transact.</div>
<div class=""><br class="">
</div>
<div class="">The only information we’ve gotten from Blackboard is that they’ve inserted our AttributeQuery and SSO URLs, and “it doesn’t work”. They don’t seem to know what to do with our IdP metadata. IdP 3 support is purportedly coming in the future.</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class=""><br class="">
</div>
<div class="">King Chung Huang</div>
<br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px; font-size: 11px;">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="text-align: center;" class=""><font class="Apple-style-span" face="Arial"><b class="">King Chung Huang</b> ｜ Information Technologies, University of Calgary ｜ ☎ 403-383-3254</font></div>
</div>
</span></div>
</span></div>
</span></div>
</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Mar 15, 2016, at 8:01 AM, Rawlinson, Philip (rawlinpa) <<a href="mailto:RAWLINPA@ucmail.uc.edu" class="">RAWLINPA@UCMAIL.UC.EDU</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Alan,<br class="">
<br class="">
Were you able to get Blackboard Transact working with IdP 3.x? We are running into issues as well. After finding this thread, we tried SHA-1 as well per this wiki page, but it did not resolve the issue:<br class="">
<a href="https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration#SecurityConfiguration-SigningandEncryptionConfiguration" class="">https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration#SecurityConfiguration-SigningandEncryptionConfiguration</a><br class="">
Re-reading your original post, we are not running in Legacy mode like you are.<br class="">
<br class="">
We have had IdP 2.x working for a couple of years with no issues once we got past the FriendyName issues. We are trying to move to IdP 3.2.1 but Blackboard Transact is the main application preventing us from upgrading right now. We have several other SPs doing
Attribute Queries over the back-channel and those are working fine when we do a test cutover in Production. For Transact though, when we view the idp-process.log file, we see the HTTP POSTs but not the SOAP requests. The IdP Attribute Query URL is staying
the same and we are not making any changes on the Transact SP side. We are running Jetty 9.3 with a separate 8443 port for back-channel traffic as described here: https://wiki.shibboleth.net/confluence/display/IDP30/Jetty93#Jetty93-SupportingSOAPEndpoints<br class="">
<br class="">
Help from anyone who has Blackboard Transact working with Shibboleth 3.x would be appreciated.<br class="">
<br class="">
Philip<br class="">
<br class="">
-----Original Message-----<br class="">
From: Powell, Alan [mailto:powela@rpi.edu] <br class="">
Sent: Wednesday, February 24, 2016 4:58 PM<br class="">
To: users@shibboleth.net<br class="">
Subject: RE: Blackboard Transact & IDP 3.x<br class="">
<br class="">
<br class="">
<br class="">
<blockquote type="cite" class=""><br class="">
<blockquote type="cite" class="">I was able to get Blackboard Transact to work with our IDP, running
<br class="">
2.x. a while ago. I can't, however, get it to work with IDP 3.x <br class="">
running in legacy mode.<br class="">
</blockquote>
<br class="">
Same resolver config, same attributes and NameID being issued?<br class="">
<br class="">
Did you try backing off from SHA-2 to SHA-1? The default in legacy mode <br class="">
is still SHA-2, that's a little bit odd but we were trying to make sure <br class="">
people didn't end up stuck on SHA-1 forever.<br class="">
<br class="">
-- Scott<br class="">
</blockquote>
<br class="">
<br class="">
Yes, same config, same attributes and NameID. I will look at SHA-1 versus SHA-2, however, as that could very well be the problem. Thank you for the suggestion.<br class="">
<br class="">
Alan<br class="">
<br class="">
<br class="">
-- <br class="">
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</body>
</html>