<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Joseph,</p>
<p>I did this very thing recently. Where you want to look on the
wiki is here:
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration</a></p>
<p>Specifically, the "Per-Profile Credential" example. It does
require adding the information to credentials.xml as well.</p>
<p>Also keep in mind you'll need to adjust the metadata you give to
WebEx and CirQlive, to reflect the new keypair you make.</p>
<pre class="moz-signature" cols="72">--
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235</pre>
<div class="moz-cite-prefix">On 08/21/2017 09:54 PM, Joseph
Fischetti wrote:<br>
</div>
<blockquote type="cite"
cite="mid:OFEFBC1489.C8EEBA16-ON00258184.000A7B70-1503366870414@notes.na.collabserv.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<font style="white-space:pre-wrap;font-family: Helvetica Neue, Helvetica, Arial, sans-serif;margin: 1em 0;">I've been asked to look into integrating cirqlive with our existing IDP 3 installation. Cirqlive adds a link between Sakai and webex sso. During my research I found that cirqlive expects the private key of our IDP so that it can sign the assertions that it sends to WebEx.
Obvious security concerns aside, when I reached out to cirqlive for clarification, I received the following PDF in reply. It seems that, given architecture 1 (page 3), they feel that sharing the idp's private key is okay. They also reference using separate keys for different SPs, which as far as im aware, isn't possible with IDP 3.
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__documentation.cirqlive.com_manuals_SSO_Multi-2DSource-5FSAML-5FAuthentication-5Fwith-5FWebEx-5F-28MEETS-29.pdf&d=DwMFaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=-eCch-TyZt4YFZl-wx8BMnYAeOJcS3U-_JfYc5rIQlY&s=m8ewVPb9bdstoz4-yWc4xY8vWLD0vwrKWkx0PdFVXIg&e=" moz-do-not-send="true">https://documentation.cirqlive.com/manuals/SSO/Multi-Source_SAML_Authentication_with_WebEx_(MEETS).pdf</a>
Does anybody else have experience with this?
Joseph Fischetti
Linux System Administrator
Marist College</font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>