<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_extra"><div class="gmail_quote">On Wed, Aug 3, 2016 at 7:14 AM, Varga Géza <span dir="ltr"><<a href="mailto:Varga.Geza@fornax.hu" target="_blank">Varga.Geza@fornax.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255)">
<p>Hi,</p>
<p> </p>
<p>Our client plant to use in case of SSO the Shibboleth.</p>
<p>In this environment server based on SAP WebAS ABAP 7.31. </p>
<p>Client reach SAP by SAP GUI for Html (explorer - http/https).<span style="font-size:12pt"> </span></p>
<p>This scenarion is supported or not by Shibboleth?</p>
<p><br></p>
<p>If yes please send me configuartion and best-practise guide.<span style="font-size:12pt"> </span></p>
<p>Regards</p><span class=""><font color="#888888">
<p><br></p></font></span></div></blockquote><div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;display:inline"></div></div><div style="font-size:12.8px"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;display:inline">supported is a heavy term: Shibboleth IdP is opensource and support is on a voluntary best effort basis, so to set expectations properly: you can't enter an incident somewhere and expect an answer or solution within a predefined period of time according to some EULA. There are third party consultants that do offer commercial support if you need it . There is also a list here: <a href="https://shibboleth.net/community/consultants.html" target="_blank">https://shibboleth.net/community/consultants.html</a> I have no idea if this list is up-to-date and if they do have an EULA or what level of support is available. </div></div><div style="font-size:12.8px"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;display:inline">That said, if you are willing to invest some time to detail your problems (if any) when you try to configure your IdP, usually the community is very helpful, just no guarantees. </div></div><div style="font-size:12.8px"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">If you really intended to ask 'is Shibboleth IdP known or expected to work with SAP' then I can say that yes we have it configured and it works for us, but YMMV. I'm afraid I won't be able to provide a best-practise guide or sample configuration because we have a rather complex configuration and I'm not entirely sure what was set up for SAP and what was for other SP's, I also don't have access to the SAP part of the configuration. Also we're still on IdP 2 and you really ought to use 3 for a new configuration (actually we should upgrade.)</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">I can say that we had some trouble getting it to work, SAP is very specific about the format of the SAML answer it wants to receive. Eventually we looked up (on google) the responses SAP expected to receive and then figured out how we could force Shibboleth to send exactly that. IF one of the consultants has significant experience with SAP and Shib IdP my advise would be to use their skills, it may be the difference between an hour of work (if they know exactly what to do) and a few days of frustration (if like us, you have to figure it out yourself, .) </div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Good luck,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div></div><div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;display:inline">Jan</div> </div></div><br></div></div>
<br>
<p style="color:rgb(34,34,34);font-family:arial,sans-serif;background-color:rgb(255,255,255)">**** DISCLAIMER ****</p><p style="color:rgb(34,34,34);font-family:arial,sans-serif;background-color:rgb(255,255,255)"><a href="http://www.tvh.com/glob/en/email-disclaimer" style="color:rgb(17,85,204);font-size:13px" target="_blank">http://www.tvh.com/glob/en/<WBR>email-disclaimer</a></p><p style="color:rgb(34,34,34);font-family:arial,sans-serif;background-color:rgb(255,255,255)">"This message is delivered to all addressees subject to the conditions<br>set forth in the attached disclaimer, which is an integral part of this<br>message."</p>