<style>@font-face{font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}</style><font face="Calibri"><p dir="ltr">Hi Claudio,</p>
<p dir="ltr">Thanks for writing - it's working fir us now.</p>
<p dir="ltr">Karla</p>
<br><br>On February 24, 2017, at 8:59 AM, Claudio Ramirez <publist.cr@gmail.com> wrote:<br><br><br></font><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">2017-02-03 22:02 GMT+01:00 Karla Borecky <span dir="ltr"><<a href="mailto:kborecky@smith.edu" target="_blank">kborecky@smith.edu</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Has anyone else dealt with a vendor using this SAML SSO implementation? (The company is Poll Everywhere, in my case.) This guy is sending me some random error his code is throwing (and a link to the actual code!), apparently laboring under the misapprehension that just because his software is throwing an error, that means my assertion is bad. (It is NOT bad.)<div><br></div><div><div>I got to the point where I sent him a sample SAML2 assertion and suggested he talk to the developers/user community for this software. Was I wrong to do this?</div><span class="gmail-HOEnZb"></span><br></div></div></blockquote></div><br><div><div>Hi Kara,<br><br></div>Our users authenticate themselves to the
Poll Everywhere SP. Their SAML implementation was pretty basic (they
used Ruby's omniauth) and they had to do several code changes to make it
work. Sadly, it a non-encrypted/signed setup.<br><br></div>Below you'll find our side of the puzzle (it's part of our public metada).<br><br>Regards,<br><br>Claudio Ramirez<br>KU Leuven - CCIS<br><br> <EntityDescriptor entityID="<a href="https://www.polleverywhere.com/auth/kuleuven">https://www.polleverywhere.com/auth/kuleuven</a>"><br> <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><br> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat><br>
<AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="<a href="https://www.polleverywhere.com/auth/kuleuven/callback">https://www.polleverywhere.com/auth/kuleuven/callback</a>"
isDefault="true" index="0"></AssertionConsumerService><br> <AttributeConsumingService index="1"><br> <ServiceName xml:lang="en"><a href="https://www.polleverywhere.com/auth/kuleuven">https://www.polleverywhere.com/auth/kuleuven</a></ServiceName><br> <ServiceDescription xml:lang="en">Poll Everywhere</ServiceDescription><br>
<RequestedAttribute
FriendlyName="eduPersonPrincipalName"
Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
isRequired="true"></RequestedAttribute><br>
<RequestedAttribute FriendlyName="mail"
Name="urn:oid:0.9.2342.19200300.100.1.3"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
isRequired="true"></RequestedAttribute><br>
<RequestedAttribute FriendlyName="givenName" Name="urn:oid:<a href="http://2.5.4.42">2.5.4.42</a>"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
isRequired="true"></RequestedAttribute><br>
<RequestedAttribute FriendlyName="surname" Name="urn:oid:<a href="http://2.5.4.4">2.5.4.4</a>"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
isRequired="true"></RequestedAttribute><br>
<RequestedAttribute FriendlyName="cn"
Name="urn:mace:dir:attribute-def:cn"
NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"
isRequired="true"></RequestedAttribute><br> </AttributeConsumingService><br> </SPSSODescriptor><br> <ContactPerson contactType="technical"><br> <GivenName>Brad Gessler</GivenName><br> <EmailAddress><a href="mailto:brad@polleverywhere.com">brad@polleverywhere.com</a></EmailAddress><br> </ContactPerson><br> </EntityDescriptor> <br></div></div>