<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
It wasn't too hard...</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Here is what I have in metadata-providers.xml:</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span> <!-- gartner metadata --><br>
</span>
<div> <MetadataProvider id="gartner" xsi:type="FileBackedHTTPMetadataProvider"<br>
</div>
<div> xmlns="urn:mace:shibboleth:2.0:metadata"<br>
</div>
<div> metadataURL="https://ssofed.gartner.com/pf/federation_metadata.ping?PartnerIdpId=https://login.oregonstate.edu/idp/shibboleth"<br>
</div>
<div> backingFile="%{idp.home}/metadata/gartner.xml"<br>
</div>
<div> minRefreshDelay="PT5M"<br>
</div>
<div> maxRefreshDelay="PT1H"<br>
</div>
<div> refreshDelayFactor="0.75"><br>
</div>
<div> <MetadataFilter xsi:type="Predicate" direction="include" removeEmptyEntitiesDescriptors="true" trim="true"><br>
</div>
<div> <Entity>http://www.gartner.com</Entity><br>
</div>
<div> </MetadataFilter> <br>
</div>
<div> </MetadataProvider><br>
</div>
<span></span></div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
and attribute-filter.xml:</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span> <!-- gartner filters --><br>
</span>
<div> <AttributeFilterPolicy id="gartner"><br>
</div>
<div> <PolicyRequirementRule xsi:type="Requester" value="http://www.gartner.com" /><br>
</div>
<div> <AttributeRule attributeID="eduPersonPrincipalName"><br>
</div>
<div> <PermitValueRule xsi:type="ANY" /><br>
</div>
<div> </AttributeRule><br>
</div>
<div> <AttributeRule attributeID="surname"><br>
</div>
<div> <PermitValueRule xsi:type="ANY" /><br>
</div>
<div> </AttributeRule><br>
</div>
<div> <AttributeRule attributeID="givenName"><br>
</div>
<div> <PermitValueRule xsi:type="ANY" /><br>
</div>
<div> </AttributeRule><br>
</div>
<div> </AttributeFilterPolicy><br>
</div>
<span></span></div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
They wanted us to perform access control, so I use an intercept for that.</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Let me know if you have any questions.</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div>
<div id="Signature">
<div></div>
<div></div>
<div style="font-family:"Courier New",monospace; font-size:12pt; color:rgb(0,0,0)">
<span style="font-family:Arial,Helvetica,sans-serif">Andy Morgan</span><span><br>
</span></div>
<div style="font-family:"Courier New",monospace; font-size:12pt; color:rgb(0,0,0)">
<div><span style="font-family:Arial,Helvetica,sans-serif">Identity & Access Management</span><br>
</div>
<div><span style="font-family:Arial,Helvetica,sans-serif">Oregon State University</span><br>
</div>
</div>
</div>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of IAM David Bantz <dabantz@alaska.edu><br>
<b>Sent:</b> Monday, November 25, 2019 3:42 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> SAML2/Shibb client login to Gartner</font>
<div> </div>
</div>
<div>
<div dir="ltr">I've been asked to look into SSO client login to Gartner. Archives have a several-year-old discussion in which Yale and CMU indicate they did get Gartner client logins relying on their Shibb IdP with unusual effort. I'm hoping for details, documentation,
and/or updates from participants here.
<div><br>
</div>
<div>David Bantz</div>
<div>UA OIT IAM</div>
</div>
</div>
</div>
</body>
</html>