<div dir="ltr">We recently did this for our Shanghai campus. In steps 11 and 12  in the guide, you gave link to, use urn:oid attribute names or friendly names. We provide uid, mail and displayName to ISE and for the group membership(step 11), the initial setup used eduPersonPrimaryAffiliation but we switch to isMemberOf(urn:oid:1.3.6.1.4.1.5923.1.5.1.1<font color="#2a00ff" face="Monaco"><span style="font-size:11px">). </span></font>As usual, be sure assertion encryption is set in a same way on Cisco ISE and the IdP. <div>Nothing unusual in the SAML setup.<br><div><br></div><div>This video, though it is for PingFederate, could help you. <a href="https://www.youtube.com/watch?v=kt1RBg9My8E">https://www.youtube.com/watch?v=kt1RBg9My8E</a></div><div><br></div><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, Jul 2, 2018 at 6:07 PM IAM David Bantz <<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Cisco ISE has instructions for configuring Ping SAML identity provider, so I'm hopeful that someone has configured Shibboleth IdP and could assure us is that's possible.<div><br></div><div><a href="https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-21/200551-Configure-ISE-2-1-Guest-Portal-with-Pin.html" target="_blank">https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-21/200551-Configure-ISE-2-1-Guest-Portal-with-Pin.html</a><br></div><div><br></div><div>David Bantz</div><div>UA OIT IAM</div></div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="m_7633740311999566806gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><font size="2"><span title="yy27" style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px"><span style="padding:0px;border:0px none;list-style-type:none">Yavor Yanakiev</span> </span><br style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px"><span style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px">Systems Developer for Identity Services</span></font><br><div>212-992-7585<br></div></div></div>