<div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small;color:#073763">Donald,</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small;color:#073763"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small;color:#073763">We have Shibb configured with the usual SAML persistent NameID, and Zoom configured to pay attention to eduPersonUniqueID as the user identifier, mail for email address etc. The config has been in place since last spring term, and we haven't had any issues with logins or invitations.</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small;color:#073763"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif;font-size:small;color:#073763">-Les</div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><br><table style="color:rgb(136,136,136);border:none;border-collapse:collapse"><tbody><tr style="height:0pt;border-top:1pt solid rgb(204,204,204)"><td style="border-right:1pt solid rgb(204,204,204);vertical-align:middle;padding:5pt;overflow:hidden"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><a href="http://www.carleton.edu/" target="_blank"><span style="font-size:11pt;font-family:Arial;color:rgb(17,85,204);vertical-align:baseline;white-space:pre-wrap"><span style="border:none;display:inline-block;overflow:hidden;width:70px;height:73px"><img height="73" src="https://lh6.googleusercontent.com/QEL1To3Ci_dJA1huaKzfZ0Lf4MaZlAy_f-W3vQjbyzNq_yXq_ZYGv3tuT4dkaZS_bZ5X6fZR4iKzBboZhxbCF5htZFnLNKGqmrzHsVJtsjsy0pfK5w2z0Dlq-EtZcWhv0PxBpWmR" width="70" style="margin-left:0px;margin-top:0px"></span></span></a></p></td><td style="border-left:1pt solid rgb(204,204,204);vertical-align:top;padding:10.8pt;overflow:hidden"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font color="#dea410" face="Arial"><span style="font-size:14.6667px;white-space:pre-wrap"><b>Les LaCroix '79</b></span></font></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(11,80,145)"><span style="font-size:11pt;font-family:Arial;vertical-align:baseline;white-space:pre-wrap">Strategic Technologist</span></span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(11,80,145)"><span style="font-size:11pt;font-family:Arial;vertical-align:baseline;white-space:pre-wrap">Information Technology Services</span></span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(11,80,145)"><span style="font-size:11pt;font-family:Arial;vertical-align:baseline;white-space:pre-wrap">t: (507) 222-5455</span></span></p></td></tr></tbody></table></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Aug 21, 2020 at 9:42 PM Lohr, Donald A - lohrda <<a href="mailto:lohrda@jmu.edu">lohrda@jmu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="auto">
<div>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt">Referring to this URL:</span></p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69);min-height:20.3px">
<span style="font-family:".SFUIText";font-size:17pt"></span><br>
</p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt"><a href="https://support.zoom.us/hc/en-us/articles/201363003-Getting-started-with-SSO" target="_blank">https://support.zoom.us/hc/en-us/articles/201363003-Getting-started-with-SSO</a></span></p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69);min-height:20.3px">
<span style="font-family:".SFUIText";font-size:17pt"></span><br>
</p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt">...it states the following:</span></p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69);min-height:20.3px">
<span style="font-family:".SFUIText";font-size:17pt"></span><br>
</p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt">First, configure your IdP to send us the following</span></p>
<ul>
<li style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:Menlo-Regular;font-size:10pt"></span><span style="font-family:".SFUIText";font-size:17pt">Any unique identifier linked to nameID such as eduPersonTargetedID, persistentID, or mail</span>
</li><li style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:Menlo-Regular;font-size:10pt"></span><span style="font-family:".SFUIText";font-size:17pt">(Optional) Accepted attributes are email (urn:oid:0.9.2342.19200300. 100.1.3), sn (urn:oid:2.5.4.4), and givenName (urn:oid:2.5.4.42).</span>
</li></ul>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69);min-height:20.3px">
<span style="font-family:".SFUIText";font-size:17pt"></span><br>
</p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt">Our plan would be to configure Shibboleth to set the nameID for Zoom to not be a user's email address. We want to use a better unique & never changing attribute, the user's eduPersonUniqueId attribute
value. We will also send Zoom a user's mail, givenname and sn attribute values.</span></p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69);min-height:20.3px">
<span style="font-family:".SFUIText";font-size:17pt"></span><br>
</p>
<p style="margin:0px;line-height:normal;font-family:".SF UI Text";color:rgb(69,69,69)">
<span style="font-family:".SFUIText";font-size:17pt">Is anyone's Shibboleth configuration for Zoom using something other than email as the nameID value? If so have you encountered any issues with nameID not set as a users email value? Especially with SSO
login, the emailing of or accepting invitations or using the Canvas LTI Pro component.</span></p>
<br>
<span style="background-color:rgba(255,255,255,0)">-- <br>
D o n a l d L o h r<br>
I n f o r m a t i o n S y s t e m s<br>
J a m e s M a d i s o n U n i v e r s i t y<br>
5 4 0 . 5 6 8 . 3 7 3 0</span></div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>