<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Morning everyone. Apologies for the X-post.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m not running a Shibboleth IdP, but I am having some issues with a vendor and their Shibboleth SP. Also I’m hoping that some other institutions may have come across Simitive before and also I don’t think I’m dealing with a Shibboleth
specific problem here, more a problem with a vendor.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Basically I’m trying to integrate my PingFederate IdP with Simitive (cloud hosted HR solution provider). It’s been an odd experience so far.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">First up I asked if I could have their metadata so I could use that to create the trust on my side. They said they “didn’t publish metadata”. Odd, but fair enough. So I asked for some details like an EntityID, ACS endpoints and so on so
I could do it manually. They then sent me a shibboleth2.xml file and told me it was their metadata. Clearly this isn’t the case and didn’t contain any of the data I needed. Anyway, we got past that and I manually created a trust on my side with mostly “best
guess” efforts (like assuming the AssertionConsumerService endpoints). I then sent them my metadata with public key.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Then an odd thing happened: they asked for my IdP’s private key which I’m certainly in no mood to give out. They sent me a link to the Shibboleth documentation claiming this was necessary; I read the documentation and came to a whole different
conclusion.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I know other Universities have used Simitive and done so via SAML, so I’m hoping that someone else has dealt with them before and I wonder if your encounters were as messy?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also, I’m hoping that my horror at being asked for my IdPs private key is justified. I was under the impression my IdP would encrypt the assertion with their public key which could only be decrypted by their private key. Even just for my
own sanity I’m right, right? The vendor is now saying that *my* side of the bargain is holding up the project and I’m in no mood to get the blame for this!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Cheers – and sorry for the long early morning email!<o:p></o:p></p>
<p class="MsoNormal">James<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="margin-left:5.65pt;border-collapse:collapse;border:none">
<tbody>
<tr style="height:156.05pt">
<td width="238" valign="top" style="width:178.4pt;border:solid white 1.0pt;padding:0cm 5.4pt 0cm 5.4pt;height:156.05pt">
<p class="MsoNormal"><b><span style="font-size:10.0pt">James Todd<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Data Centre & Operations Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt">Data Centre & Operations<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Information Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Edinburgh Napier University<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Craiglockhart Campus<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Edinburgh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">EH12 1DJ<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Tel No: 0131 455 4313<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">Email: j.todd@napier.ac.uk <br>
Twitter: </span><a href="https://twitter.com/EdNapITSupport"><span style="font-size:9.0pt;color:blue;mso-fareast-language:EN-GB">@EdNapITSupport</span></a><span style="font-size:9.0pt;mso-fareast-language:EN-GB">
</span><span style="font-size:9.0pt">/ </span><a href="https://twitter.com/EdNapLib"><span style="font-size:9.0pt;color:blue;mso-fareast-language:EN-GB">@EdNapLib</span></a><span style="font-size:9.0pt;mso-fareast-language:EN-GB">
</span><span style="font-size:9.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;color:#44546A"><br>
<br>
</span></b><span style="font-size:8.0pt"><o:p></o:p></span></p>
</td>
</tr>
<tr style="height:111.1pt">
<td width="238" valign="top" style="width:178.4pt;border:solid white 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt;height:111.1pt">
<p class="MsoNormal"><b><span style="font-size:10.0pt"><o:p> </o:p></span></b></p>
</td>
</tr>
<tr style="height:9.5pt">
<td width="238" valign="top" style="width:178.4pt;border:solid white 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt;height:9.5pt">
<p class="MsoNormal"><b><span style="font-size:10.0pt"><o:p> </o:p></span></b></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<table width="100%" cellspacing="0" cellpadding="="0"" border="0" align="left" style="font-family: Arial, Helvetica, san-serif; font-size:10pt;">
<tbody>
<tr>
<td style="padding: 5px;">
<p>This message and its attachment(s) are intended for the addressee(s) only and should not be read, copied, disclosed, forwarded or relied upon by any person other than the intended addressee(s) without the permission of the sender. If you are not the intended
addressee you must not take any action based on this message and its attachment(s) nor must you copy or show them to anyone. Please respond to the sender and ensure that this message and its attachment(s) are deleted.</p>
<p>It is your responsibility to ensure that this message and its attachment(s) are scanned for viruses or other defects. Edinburgh Napier University does not accept liability for any loss or damage which may result from this message or its attachment(s), or
for errors or omissions arising after it was sent. Email is not a secure medium. Emails entering Edinburgh Napier University's system are subject to routine monitoring and filtering by Edinburgh Napier University.</p>
<p>Edinburgh Napier University is a registered Scottish charity. Registration number SC018373</p>
</td>
</tr>
</tbody>
</table>
</body>
</html>