<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p>Scott, </p>
<p><br>
</p>
<p></p>
<p style="font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">
CircLive uses these integrations to create, provision, and organize WebEx functions in a way that integrates into Canvas, Blackboard, or D2L (etc...). Without them WebEx just doesn't have the organization and permissions/filtering to work with a learning management
system.</p>
<div><br>
</div>
They have implemented an integrated system with their own Saml IDP that integrates with WebEx's API's and WebEx's Saml service provider. Since they can only integrate with their own IDP and charge a substantial sum to connect their IDP to your own IDP the shared
certificate solution is pretty much the only way to move forward. Configuration of the shared certificate functionality took a about 2 or 3 hours and was substantially less expensive then the cost of setting up their IDP to our IDP integration.
<p></p>
<p><br>
</p>
<p><br>
</p>
<p>Note setting up WebEx with Shibboleth pretty difficult as they have very poor documentation related to the custom attributes they require to be sent.</p>
<p><br>
</p>
<p>- rhian</p>
<div id="x_Signature">
<div id="x_divtagdefaultwrapper" style="background-color:rgb(255,255,255); font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<div name="x_divtagdefaultwrapper" style="margin:0px">
<div style="background-color:rgb(255,255,255)">
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Rhian Resnick</span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:16px; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Assistant Director Middleware and HPC</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:16px; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Office of Information Technology</span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt"><br>
</span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Florida Atlantic University</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">777 Glades Road, CM22, Rm 173B</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Boca Raton, FL 33431</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Phone 561.297.2647</span><span style="color:black; font-family:Calibri,sans-serif; font-size:11pt"></span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt">Fax 561.297.0222</span></p>
<p class="x_x_MsoNormal" style="color:rgb(33,33,33); font-family:'Times New Roman',serif; font-size:12pt; margin:0in 0in 0pt; background-color:rgb(255,255,255)">
<span style="color:black; font-family:Calibri,sans-serif; font-size:10.5pt"> </span><span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:11pt"><a href="https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg" id="LPNoLP" style="border:0px; font-family:Arial,Helvetica,sans-serif; font-size:13px; line-height:21px; margin:0px; padding:0px; vertical-align:baseline; color:rgb(0,102,204); text-decoration:none; background-color:rgb(239,239,239)"><img alt="image" class="x_alignnone x_size-full x_wp-image-498" style="border:0px; font-style:inherit; font-variant:inherit; font-weight:inherit; line-height:inherit; margin:5px; padding:0px; vertical-align:middle; max-width:100%; width:195px" src="http://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg"></a></span></p>
</div>
</div>
</div>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Tuesday, August 22, 2017 8:44:24 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Integrating idp3 with cirqlive</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On 8/22/17, 6:37 PM, "users on behalf of Rhian Resnick" <users-bounces@shibboleth.net on behalf of rresnick@fau.edu> wrote:<br>
<br>
> We have implemented Cirqlive and yes this process is as horrible as it sounds. Webex doesn't understand Saml and they don't
<br>
> support defining multiple identify providers (which would have resolved this issue).<br>
<br>
What was precisely the "issue" though? LTI is a hack by LMS vendors cooked up to take over authentication because "central IT is so hard to work with". There's no compelling reason to be using it to get at WebEx, is there? Why wouldn't people just be logged
in via the IdP? I must be missing something. Don't know what cirqlive is I guess.<br>
<br>
> In the end creating and sharing a custom key and allowing impersonation of all users on the webex site by cirqlive is the only way<br>
> to setup the integration while preventing cirqlive having access to your federated private key. (It certainly wasn't enjoyable or<br>
> fun explaining this configuration to our security team)<br>
<br>
Using a custom key to limit the risk is about the best option I could imagine if you really have to do this.<br>
<br>
> IDP 3.3 supports the process here is an except from our relaying-party.xml file.
<br>
<br>
There are some better ways coming, to do this with metadata, it's quite messy at the moment. Also, you don't need all those profile beans. I'm sure the app in question only needs SAML2.SSO, the rest can be omitted.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font>
</body>
</html>