<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="text-align:left; direction:ltr;">
<div>Yeah, that's how we have it setup. Nothing special. Just releasing R&S to them.</div>
<div><br>
</div>
<div>On Mon, 2020-08-24 at 15:05 -0400, Donald Lohr wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
Thanks, this has been very helpful.<br>
<br>
Does anyone have a functioning Shibboleth IdP configuration via InCommon?<br>
<br>
The reason I ask, is that another school told us:<br>
<br>
<div class="page" title="Page 1">
<div class="layoutArea">
<div class="column"><i><span style="font-size: 12pt;">Zoom is an InCommon member and we first attempted to configure with InCommon. However, we had some challenges with the way they signed assertions and logout. So, we decided we should do a manual configuration
of SSO instead. </span></i><br>
</div>
</div>
</div>
<br>
But I believe they've been a Zoom customer for a few years.<br>
<br>
Thanks,<br>
Don<br>
<br>
<br>
<div class="moz-cite-prefix">On 8/21/20 10:41 PM, Lohr, Donald A - lohrda wrote:<br>
</div>
<blockquote type="cite" cite="mid:046654C5-DE37-482E-A68A-3ABF6699E226@jmu.edu" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;">Referring to this URL:</span></p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69); min-height: 20.3px;">
<span style="font-family: '.SFUIText'; font-size: 17pt;"></span><br>
</p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__support.zoom.us_hc_en-2Dus_articles_201363003-2DGetting-2Dstarted-2Dwith-2DSSO&d=DwMGaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=fLnm-WN9U4d94T42-8yB77D1UNg2gyNoFMXbDF8Oh9w&s=apt4aG3d0K1Wv8QERvPkmi6ynRplZudGFD6sPI3ZN8c&e=" moz-do-not-send="true">https://support.zoom.us/hc/en-us/articles/201363003-Getting-started-with-SSO</a></span></p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69); min-height: 20.3px;">
<span style="font-family: '.SFUIText'; font-size: 17pt;"></span><br>
</p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;">...it states the following:</span></p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69); min-height: 20.3px;">
<span style="font-family: '.SFUIText'; font-size: 17pt;"></span><br>
</p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;">First, configure your IdP to send us the following</span></p>
<ul>
<li style="margin: 0px; line-height: normal; font-family: '.SF
UI Text'; color: rgb(69, 69, 69);">
<span style="font-family: Menlo-Regular; font-size: 10pt;"></span><span style="font-family: '.SFUIText'; font-size: 17pt;">Any unique identifier linked to nameID such as eduPersonTargetedID, persistentID, or mail</span>
</li><li style="margin: 0px; line-height: normal; font-family: '.SF
UI Text'; color: rgb(69, 69, 69);">
<span style="font-family: Menlo-Regular; font-size: 10pt;"></span><span style="font-family: '.SFUIText'; font-size: 17pt;">(Optional) Accepted attributes are email (urn:oid:0.9.2342.19200300. 100.1.3), sn (urn:oid:2.5.4.4), and givenName (urn:oid:2.5.4.42).</span>
</li></ul>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69); min-height: 20.3px;">
<span style="font-family: '.SFUIText'; font-size: 17pt;"></span><br>
</p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;">Our plan would be to configure Shibboleth to set the nameID for Zoom to not be a user's email address. We want to use a better unique & never changing attribute, the user's eduPersonUniqueId attribute
value. We will also send Zoom a user's mail, givenname and sn attribute values.</span></p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69); min-height: 20.3px;">
<span style="font-family: '.SFUIText'; font-size: 17pt;"></span><br>
</p>
<p style="margin: 0px; line-height: normal; font-family: '.SF UI
Text'; color: rgb(69, 69, 69);">
<span style="font-family: '.SFUIText'; font-size: 17pt;">Is anyone's Shibboleth configuration for Zoom using something other than email as the nameID value? If so have you encountered any issues with nameID not set as a users email value? Especially with SSO
login, the emailing of or accepting invitations or using the Canvas LTI Pro component.</span></p>
<br>
<span style="background-color: rgba(255, 255, 255, 0);">-- <br>
D o n a l d L o h r<br>
I n f o r m a t i o n S y s t e m s<br>
J a m e s M a d i s o n U n i v e r s i t y<br>
5 4 0 . 5 6 8 . 3 7 3 0</span></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset> </blockquote>
<br>
<pre>-- </pre>
<pre>D o n a l d L o h r</pre>
<pre>I n f o r m a t i o n S y s t e m s</pre>
<pre>J a m e s M a d i s o n U n i v e r s i t y</pre>
<pre>5 4 0 . 5 6 8 . 3 7 3 0</pre>
<pre><br></pre>
</blockquote>
</body>
</html>