<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Originally we had Ellucian configured with our IDP, but it required running Ethos IDP servers that deferred authentication to our Shibboleth IDPs. We found this to be too much infrastructure for one product, so we moved them to use Azure for authentication. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks, Jay <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>________________________________<o:p></o:p></p><p class=MsoNormal>Jason Rappaport (he/him)<o:p></o:p></p><p class=MsoNormal>Identity and Access Management Analyst<o:p></o:p></p><p class=MsoNormal>Office of Information Technology<o:p></o:p></p><p class=MsoNormal>Email: <a href="mailto:jasonrap@princeton.edu"><span style='color:windowtext'>jasonrap@princeton.edu</span></a> <o:p></o:p></p><p class=MsoNormal>Office: 609-258-8464<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of </b>Janemarie Duh<br><b>Sent:</b> Tuesday, April 13, 2021 10:35 AM<br><b>To:</b> Shib Users <users@shibboleth.net><br><b>Subject:</b> Re: Ellucian Advance<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>We used the same integration model (Ellucian hosted ADFS to our Shib IdP) for CRM Advance.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal> Janemarie<o:p></o:p></p></div><div><div><div><div><pre><span style='font-family:"Arial",sans-serif'>Janemarie Duh<o:p></o:p></span></pre><pre><span style='font-family:"Arial",sans-serif'>Identity and Access Management<o:p></o:p></span></pre><pre><span style='font-family:"Arial",sans-serif'>Information Technology Services<br>Lafayette College<br>610-330-5609</span><o:p></o:p></pre></div></div></div><p class=MsoNormal><o:p> </o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Tue, Apr 13, 2021 at 10:28 AM Craig Pluchinsky <<a href="mailto:craigp@iup.edu">craigp@iup.edu</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Is this an Ellucian CRM product? We setup Ellucian CRM Advise (not advance, but might be similar) recently, and they told us we had to use their IDP (EIS) because it supports WS-* protocol. After researching I found that they were just configuring EIS to do SAML with their ADFS. No WS-* protocol. So, we configured our IDP to use their ADFS instance then configured CRM to use our Shib IDP. No need for EIS.<o:p></o:p></span></p></div><div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div id="gmail-m_1550364487538396121Signature"><div><div id="gmail-m_1550364487538396121divtagdefaultwrapper"><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>-------------------------------<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Craig Pluchinsky<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>IT Services<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Indiana University of Pennsylvania<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>724-357-3327<o:p></o:p></span></p></div></div></div></div></div><div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="98%" align=center></div><div id="gmail-m_1550364487538396121divRplyFwdMsg"><p class=MsoNormal><b><span style='color:black'>From:</span></b><span style='color:black'> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> on behalf of Donald Lohr <<a href="mailto:lohrda@jmu.edu" target="_blank">lohrda@jmu.edu</a>><br><b>Sent:</b> Tuesday, April 13, 2021 9:14 AM<br><b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br><b>Subject:</b> Ellucian Advance</span> <o:p></o:p></p><div><p class=MsoNormal> <o:p></o:p></p></div></div><div><div><p class=MsoNormal>Anyone using Ellucian Advance configured to SAML SSO against their <br>Shibboleth IdP? Feel free to reply offline if you would rather not reply <br>publicly.<br><br>thx,<br>Don<br><br>-- <br>D o n a l d L o h r<br>I n f o r m a t i o n S y s t e m s<br>J a m e s M a d i s o n U n i v e r s i t y<br>5 4 0 . 5 6 8 . 3 7 3 0<br><br>-- <br>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><o:p></o:p></p></div></div></div></div><p class=MsoNormal>-- <br>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><o:p></o:p></p></blockquote></div></div></body></html>