<div dir="ltr">In your activationCondition, I think you want the value to be the NetPartner EntityId, which is simply "NetPartner".<div><br></div><div>ajs</div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, May 14, 2018 at 10:32 AM Daudt, Carl <<a href="mailto:crdaudt@taylor.edu">crdaudt@taylor.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_1388280848886004674WordSection1">
<p class="MsoNormal">Thanks Tony. This has brought me beyond the certificate issue that presented me with the NetPartner “Invalid Single Sign On Response” message. In fact, I think I am close, but either NetPartner is not processing the netPartnerStudentID
(an ID from our Banner database), or the netPartnerStudentID is not populated with the data I expect. Based on my Shibboleth debug logs, I believe NetPartner is trying to use the wrong attribute, because netPartnerStudentID appears to be populated correctly.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I wonder if I need to configure Shibboleth to use netPartnerStudentID as my transient ID? Tony, perhaps you can help here.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here are relevant error messages, log entries, and Shibboleth configurations:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The error message presented to the user by NetPartner is “Your login failed. We could not validate your netPartnerStudentID”.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">There is no entry recorded in the NetPartner NPStudent.log file (when I had certificate issues, there was an error entry in this file).<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">--From my Shibboleth idp-process.log, I have the following:<u></u><u></u></p>
<p class="MsoNormal">------ BEGIN id-process.log -------<u></u><u></u></p>
<p class="MsoNormal">2018-05-14 10:55:18,808 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractAttributeDefinition:247] - Attribute Definition 'netPartnerStudentID': produced an attribute with the following values [StringAttributeValue{value=@12345678}]<u></u><u></u></p>
<p class="MsoNormal"> (where “@12345678” matches the BannerID for the NetPartner User, as identified in the NetPartner “Alternet ID” field that is used for NetPartner logins).<u></u><u></u></p>
<p class="MsoNormal">--- and ---<u></u><u></u></p>
<p class="MsoNormal">2018-05-14 10:55:19,011 - INFO [Shibboleth-Audit.SSO:241] - 20180514T145519Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|llcpcpikeeagmlemdfpnapkbjmimiabncmcipeno|NetPartner|<a href="http://shibboleth.net/ns/profiles/saml2/sso/browser%7Chttps://myshibbolethserver.myuniversity.edu/idp/shibboleth%7Curn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST%7C_e1728" target="_blank">http://shibboleth.net/ns/profiles/saml2/sso/browser|https://myshibbolethserver.myuniversity.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_e1728</a>…677f2b|crdaudt|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|netPartnerStudentID|AAdzZW…H6Hqg=|_13f33…dc545|<u></u><u></u></p>
<p class="MsoNormal">------ END id-process.log -------<u></u><u></u></p>
<p class="MsoNormal">Note about the logs above: I do not know if the fact that both my username, “crdaudt”, and a hash for the netPartnerStudentID is being retured to the service provider is relevant.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here is my configuration in saml-named.xml:<u></u><u></u></p>
<p class="MsoNormal">------ BEGIN ------<u></u><u></u></p>
<p class="MsoNormal"> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<u></u><u></u></p>
<p class="MsoNormal"> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"<u></u><u></u></p>
<p class="MsoNormal"> p:attributeSourceIds="#{ {'netPartnerStudentID'} }"<u></u><u></u></p>
<p class="MsoNormal"> ><u></u><u></u></p>
<p class="MsoNormal"> <property name="activationCondition"><u></u><u></u></p>
<p class="MsoNormal"> <bean parent="shibboleth.Conditions.RelyingPartyId"><u></u><u></u></p>
<p class="MsoNormal"> <constructor-arg name="candidates"><u></u><u></u></p>
<p class="MsoNormal"> <list><u></u><u></u></p>
<p class="MsoNormal"> <value><a href="https://mynetpartnerserver.myuniversity.edu" target="_blank">https://mynetpartnerserver.myuniversity.edu</a></value><u></u><u></u></p>
<p class="MsoNormal"> </list><u></u><u></u></p>
<p class="MsoNormal"> </constructor-arg><u></u><u></u></p>
<p class="MsoNormal"> </bean><u></u><u></u></p>
<p class="MsoNormal"> </property><u></u><u></u></p>
<p class="MsoNormal"> </bean><u></u><u></u></p>
<p class="MsoNormal">------ END ------<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Any thoughts?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-family:"Gill Sans MT",sans-serif;color:#1f497d">Carl R. Daudt</span></b><span style="color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1f497d">Enterprise Applications Systems Analyst, Information Technology</span><span style="color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1f497d">Taylor University
<br>
236 W. Reade Avenue <br>
Upland, IN 46989 <br>
Office: 765-998-5313</span><span style="color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1f497d"><a href="mailto:crdaudt@taylor.edu" target="_blank"><span style="color:blue">crdaudt@taylor.edu</span></a></span><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<br>
<br>
<font face="Gill Sans Regular, Gill Sans MT, Trebuchet MS, Helvetica" color="888888" size="2">The information in this communication is intended solely for the individual or entity to whom it is addressed. It may contain confidential or legally privileged information.
If you are not the intended recipient, any disclosure, copying, distribution or reliance on the contents of this information is strictly prohibited, and may be unlawful. If you have received this communication in error, please notify us immediately by responding
to the sender of this email, and then delete it from your system. Taylor University is not liable for the inaccurate or improper transmission of the information contained in this communication or for any delay in its receipt.</font>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Tony Skalski</b></div><div dir="ltr">System Administrator | IT</div><div dir="ltr"><img src="https://docs.google.com/uc?export=download&id=0B8pehFb2jk1VTlJUMXNxQzlUZ0k&revid=0B8pehFb2jk1VR0ZGVzBjRksvU1NMQUdwSzNIa05Ea08ydjFFPQ" width="200" height="77"><br></div><div dir="ltr"><b>Office: </b><a href="javascript:void(0);" target="_blank">507-786-3227</a></div><div dir="ltr">1510 St. Olaf Avenue Northfield, MN 55057</div><div dir="ltr"><a href="http://stolaf.edu" target="_blank">stolaf.edu</a></div><div><div><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>