<div dir="ltr">A follow up on this one-- I was able to get the SSO configuration for the manager and the user endpoints working. A big thanks to everyone who provided their insights.<div>However, I was recently told that there is a 3rd login for the physical clocks. When we asked for the SSO URL for that endpoint, they gave me the same endpoint as for the manager interface, which makes no sense to me. The vendor is just suggesting we set up local logins for this, which just seems kind of flawed to me because you would lose the MFA and risk-based protection our SSO provides.</div><div><br></div><div>Has anyone else set up SSO for the clock admin endpoint?</div><div><br></div><div>Thanks,</div><div>Carl Waldbieser</div><div>ITS</div><div>Lafayette College</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Jun 10, 2025 at 1:28 PM Carl Waldbieser <<a href="mailto:waldbiec@lafayette.edu">waldbiec@lafayette.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I know it has been 5 years, but now we're integrating with this vendor.<div>I think I could probably guess what our metadata file is supposed to look like, but it is more of a puzzle to me what our unsolicited SSO URL is supposed to look like.</div><div>If anyone could provide templates for the metadata or URL, I would appreciate it.</div><div><br></div><div>Thanks,</div><div>Carl Waldbieser</div><div>ITS</div><div>Lafayette College</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jun 16, 2020 at 12:19 PM Boyd, Todd M. <<a href="mailto:tmboyd1@ccis.edu" target="_blank">tmboyd1@ccis.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Walt,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I just sent you an e-mail off-list with further information. Provided it works for you, I’ll get a cleaner post put together and put it here.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">-Todd<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>>
<b>On Behalf Of </b>Yantis, Walt<br>
<b>Sent:</b> Tuesday, June 16, 2020 10:17 AM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject:</b> Re: TimeClock Plus<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border:1pt solid black;padding:0in">
<p class="MsoNormal" style="margin-bottom:12pt;background:indigo"><b><span style="font-size:10pt;color:pink">CAUTION!:</span></b>
<span style="font-size:10pt;color:white">This email originated from outside of Columbia College.</span><u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black">I wish they had responded to you because now we're getting to integrate with them! Yay<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black">First time I've been asked to not sign the response, and to only sign the assertion, but still didn't get us any further.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black">If you wouldn't mind sharing a working metadata file I'd love to compare it to the one I've been working on.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black">Walt<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Calibri,sans-serif;color:black">Texas State University<u></u><u></u></span></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="m_4454497831617072653m_9139722496854684881divRplyFwdMsg">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif;color:black">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif;color:black"> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>>
on behalf of Boyd, Todd M. <<a href="mailto:tmboyd1@ccis.edu" target="_blank">tmboyd1@ccis.edu</a>><br>
<b>Sent:</b> Saturday, May 16, 2020 11:53 AM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject:</b> RE: TimeClock Plus</span> <u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt">Perhaps moot, as this has already been replied to, but I will say that we had a similarly ridiculous go-round with them until I just manually crafted a metadata file for their SP. Integrating with them was
frustrating, to say the least. Afterward, I offered to provide them with documentation about how the Shibboleth integration had been done, but nothing ever came of it.<br>
<br>
-Todd<br>
<br>
-----Original Message-----<br>
From: users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> On Behalf Of Lohr, Donald<br>
Sent: Friday, May 15, 2020 8:10 AM<br>
To: <a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a><br>
Subject: TimeClock Plus<br>
<br>
CAUTION!: This email originated from outside of Columbia College.<br>
<br>
<br>
Any of you have this application/SP configured.<br>
<br>
Per the vendor, they only support "IdP Initiated" and do not have any configuration documentation to provide.<br>
<br>
They do configuration as a conference call.<br>
<br>
I need more detailed information about what a configuration looks like.<br>
<br>
As always thanks,<br>
Don<br>
<br>
--<br>
D o n a l d L o h r<br>
I n f o r m a t i o n S y s t e m s<br>
J a m e s M a d i s o n U n i v e r s i t y<br>
5 4 0 . 5 6 8 . 3 7 3 0<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0" target="_blank">
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><br>
-- <br>
For Consortium Member technical support, see <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0" target="_blank">
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></blockquote></div>
</blockquote></div>