Changes between Version 3 and Version 4 of Faculty180


Ignore:
Timestamp:
11/01/12 14:18:39 (12 years ago)
Author:
dabantz@…
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • Faculty180

    v3 v4  
    11== [[https://iam.alaska.edu/|IAM]] / [[https://iam.alaska.edu/projects|Projects]] / [[https://iam.alaska.edu/shib|Shibboleth]] / [[ServiceCandidates|Service Candidates]] / Faculty 180 == 
    22 
    3 from http://www.data180.com/faculty180.php : 
     3UA sponsored Data180 as [[http://www.incommon.org/participants/|Partner in InCommon]] 
     4The Service Provider is [[http://www.incommon.org/federation/info/entity.html?entityID=https%3A%2F%2Fwww.faculty180.com%2Fshibboleth-sp|Faculty180]] thus metatdata is updated from [[http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml|InCommon federation metadata]].  
     5Faculty180 uses normal SP-initiated requests to the IdP from  
     6http://www.data180.com/faculty180/uaf_dev 
    47 
    5 Authentication — Allow login via any single sign-on system (e.g., LDAP, Shibboleth, CAS, WIND, faculty portals) 
    6 ----------- 
     8=== UA IdP Attribute-release for Faculty180 === 
    79 
    8 On Wed, 22 Aug 2012, at 07:19 , L K Williams <lk@data180.com> wrote: 
     10ePPN, givenName, surname, cn, email, employeeNumber (Banner ID #) 
    911 
    10 David, 
     12{{{ 
     13<AttributeFilterPolicy id="releaseToFaculty180"> 
     14    <PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://www.faculty180.com/shibboleth-sp" /> 
    1115 
    12 Thank you for the information.  We currently have client schools that use 
    13 Shibboleth for authentication, so this should be an easy process for our 
    14 setup with UAF. 
     16    <AttributeRule attributeID="eduPersonPrincipalName"> 
     17        <PermitValueRule xsi:type="basic:ANY" /> 
     18    </AttributeRule> 
     19    <AttributeRule attributeID="surname"> 
     20        <PermitValueRule xsi:type="basic:ANY" /> 
     21    </AttributeRule> 
     22    <AttributeRule attributeID="givenName"> 
     23        <PermitValueRule xsi:type="basic:ANY" /> 
     24    </AttributeRule> 
     25    <AttributeRule attributeID="email"> 
     26        <PermitValueRule xsi:type="basic:ANY" /> 
     27    </AttributeRule> 
     28    <AttributeRule attributeID="commonName"> 
     29        <PermitValueRule xsi:type="basic:ANY" /> 
     30    </AttributeRule> 
     31    <AttributeRule attributeID="employeeNumber"> 
     32        <PermitValueRule xsi:type="basic:ANY" /> 
     33    </AttributeRule> 
    1534 
    16 I have forwarded your email to Scott Wymer, our chief technology officer. 
    17 He will be contacting you to see how we should to proceed. 
    1835 
    19 Best, 
     36</AttributeFilterPolicy> 
    2037 
    21 L. K. Williams 
    22 Data180 
    23 www.data180.com 
    24 (888)328-2180 
     38}}} 
    2539 
    26 On 8/21/12 6:46 PM, "David Bantz" <dabantz@alaska.edu> wrote: 
     40=== Data180 / Faculty180 metadata as of 2012-11-01 === 
     41{{{ 
     42<!-- Data 180,LLC --> 
     43<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://www.faculty180.com/shibboleth-sp"> 
     44<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"> 
     45<md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"> 
     46<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"> 
     47<mdui:DisplayName xml:lang="en">Faculty180</mdui:DisplayName> 
     48<mdui:InformationURL xml:lang="en">http://www.data180.com/</mdui:InformationURL> 
     49<mdui:Logo height="40" width="188" xml:lang="en"> 
     50https://www.faculty180.com/pix/Faculty180-LOGO_40Hi.gif 
     51</mdui:Logo> 
     52</mdui:UIInfo> 
     53</md:Extensions> 
     54<md:KeyDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"> 
     55<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> 
     56<ds:X509Data> 
     57<!-- 
     58Serial No. 15863846389512568700, expires on Mon Apr 5 20:57:32 2021 GMT 
     59--> 
     60<ds:X509Certificate> 
     61MIIC/TCCAeWgAwIBAgIJANwntD2yQn98MA0GCSqGSIb3DQEBBQUAMB0xGzAZBgNV BAMTEmFjYWRpZGIxLmluZXR1Lm5ldDAeFw0xMTA0MDgyMDU3MzJaFw0yMTA0MDUy MDU3MzJaMB0xGzAZBgNVBAMTEmFjYWRpZGIxLmluZXR1Lm5ldDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAKWwODdeo6pUaWof8lhGaSRHwtsfe5tSOp3b 2eZBlW0FanQS9s/f3vOWvc+BQWgmt9GYeKCntK4WZlLDTd6dfFEA1v7XJazJJCoO pZ0cp2oPHAzG3IoulP+/DejqL+dMWPlpLnzhDijD2gyXUfOzrWoRwYxWjYgA8keu DZsbLbXQcVf+cc0FbbQw+dFhHURJYTMHUrtkqpHUz4T0kSvmiK0iek8gyiFyEjlt 7ANbhUK0j2bLanGVRD8800EhT1VowPjRmpI9GpiB9Xn8iDAm/0vHdRiRFwjGidDP 4cmeVJZnnJipUGK115wGhh+WnjDfvumd3azI3CuE0VrmUDASxTUCAwEAAaNAMD4w HQYDVR0RBBYwFIISYWNhZGlkYjEuaW5ldHUubmV0MB0GA1UdDgQWBBR9LXkYg5X9 jEU1hIIxrXmEa0/QZjANBgkqhkiG9w0BAQUFAAOCAQEATJHTlxxjxQpZ+Av8maZL 5Q0sHVnoYPS+qvSy9CwHteAPK/TFrw2teRfMxAIiGFo3DuznkdZTH/o2RFaPjrqj byf8LP1w16ZpFEWCkhxJmBXDcRTa3P/fBJVqG9yPHlqB1xitrch4lUa0mwueCfqP stIr9d5Sw5MOvhIOqqr81Y9FTJAzlTBgolKGFlNtusLEv5mDovVmDNTfYuv+xn9j vYDFMsHlzzrf8ftP18yprqbZpOZM/lbAaB2NQF4zcUWoD86Wig4NZLbVwR8OzEr1 2i+kdOKCYjRoTLz+doABVwDdJ9/vZ/pnlGtIIE/WV34g1oP4Pu6TsXg/D3qq1Xn7 eQ== 
     62</ds:X509Certificate> 
     63</ds:X509Data> 
     64</ds:KeyInfo> 
     65</md:KeyDescriptor> 
     66<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.faculty180.com/Shibboleth.sso/SAML2/POST" index="1"/> 
     67<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.faculty180.com/Shibboleth.sso/SAML/POST" index="2"/> 
     68</SPSSODescriptor> 
     69<Organization> 
     70<OrganizationName xml:lang="en">Data 180,LLC</OrganizationName> 
     71<OrganizationDisplayName xml:lang="en">Data 180,LLC</OrganizationDisplayName> 
     72<OrganizationURL xml:lang="en">http://www.data180.com/</OrganizationURL> 
     73</Organization> 
     74<ContactPerson contactType="administrative"> 
     75<GivenName>Dr. L.K. Williams</GivenName> 
     76<EmailAddress>lk@data180.com</EmailAddress> 
     77</ContactPerson> 
     78<ContactPerson contactType="technical"> 
     79<GivenName>Dr. Scott Wymer</GivenName> 
     80<EmailAddress>scott@data180.com</EmailAddress> 
     81</ContactPerson> 
     82</EntityDescriptor> 
     83<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://www.folio180.com/shibboleth-sp"> 
     84<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"> 
     85<md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"> 
     86<DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://my.folio180.com/Shibboleth.sso/Login" index="1"/> 
     87<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"> 
     88<mdui:DisplayName xml:lang="en">Folio180</mdui:DisplayName> 
     89<mdui:InformationURL xml:lang="en">http://www.data180.com/</mdui:InformationURL> 
     90<mdui:Logo height="51" width="210" xml:lang="en">https://www.folio180.com/images/Folio180_Logo.png</mdui:Logo> 
     91</mdui:UIInfo> 
     92</md:Extensions> 
     93<md:KeyDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"> 
     94<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> 
     95<ds:X509Data> 
     96<!-- 
     97Serial No. 15863846389512568700, expires on Mon Apr 5 20:57:32 2021 GMT 
     98--> 
     99<ds:X509Certificate> 
     100MIIC/TCCAeWgAwIBAgIJANwntD2yQn98MA0GCSqGSIb3DQEBBQUAMB0xGzAZBgNV BAMTEmFjYWRpZGIxLmluZXR1Lm5ldDAeFw0xMTA0MDgyMDU3MzJaFw0yMTA0MDUy MDU3MzJaMB0xGzAZBgNVBAMTEmFjYWRpZGIxLmluZXR1Lm5ldDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAKWwODdeo6pUaWof8lhGaSRHwtsfe5tSOp3b 2eZBlW0FanQS9s/f3vOWvc+BQWgmt9GYeKCntK4WZlLDTd6dfFEA1v7XJazJJCoO pZ0cp2oPHAzG3IoulP+/DejqL+dMWPlpLnzhDijD2gyXUfOzrWoRwYxWjYgA8keu DZsbLbXQcVf+cc0FbbQw+dFhHURJYTMHUrtkqpHUz4T0kSvmiK0iek8gyiFyEjlt 7ANbhUK0j2bLanGVRD8800EhT1VowPjRmpI9GpiB9Xn8iDAm/0vHdRiRFwjGidDP 4cmeVJZnnJipUGK115wGhh+WnjDfvumd3azI3CuE0VrmUDASxTUCAwEAAaNAMD4w HQYDVR0RBBYwFIISYWNhZGlkYjEuaW5ldHUubmV0MB0GA1UdDgQWBBR9LXkYg5X9 jEU1hIIxrXmEa0/QZjANBgkqhkiG9w0BAQUFAAOCAQEATJHTlxxjxQpZ+Av8maZL 5Q0sHVnoYPS+qvSy9CwHteAPK/TFrw2teRfMxAIiGFo3DuznkdZTH/o2RFaPjrqj byf8LP1w16ZpFEWCkhxJmBXDcRTa3P/fBJVqG9yPHlqB1xitrch4lUa0mwueCfqP stIr9d5Sw5MOvhIOqqr81Y9FTJAzlTBgolKGFlNtusLEv5mDovVmDNTfYuv+xn9j vYDFMsHlzzrf8ftP18yprqbZpOZM/lbAaB2NQF4zcUWoD86Wig4NZLbVwR8OzEr1 2i+kdOKCYjRoTLz+doABVwDdJ9/vZ/pnlGtIIE/WV34g1oP4Pu6TsXg/D3qq1Xn7 eQ== 
     101</ds:X509Certificate> 
     102</ds:X509Data> 
     103</ds:KeyInfo> 
     104</md:KeyDescriptor> 
     105<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://my.folio180.com/Shibboleth.sso/SAML2/POST" index="1"/> 
     106<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://my.folio180.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/> 
     107<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://my.folio180.com/Shibboleth.sso/SAML2/Artifact" index="3"/> 
     108<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://my.folio180.com/Shibboleth.sso/SAML2/ECP" index="4"/> 
     109<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://my.folio180.com/Shibboleth.sso/SAML/POST" index="5"/> 
     110<md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://my.folio180.com/Shibboleth.sso/SAML/Artifact" index="6"/> 
     111</SPSSODescriptor> 
     112<Organization> 
     113<OrganizationName xml:lang="en">Data 180,LLC</OrganizationName> 
     114<OrganizationDisplayName xml:lang="en">Data 180,LLC</OrganizationDisplayName> 
     115<OrganizationURL xml:lang="en">http://www.data180.com/</OrganizationURL> 
     116</Organization> 
     117<ContactPerson contactType="administrative"> 
     118<GivenName>Dr. L.K. Williams</GivenName> 
     119<EmailAddress>lk@data180.com</EmailAddress> 
     120</ContactPerson> 
     121<ContactPerson contactType="technical"> 
     122<GivenName>Dr. Scott Wymer</GivenName> 
     123<EmailAddress>scott@data180.com</EmailAddress> 
     124</ContactPerson> 
     125</EntityDescriptor> 
    27126 
    28 University of Alaska - Fairbanks has, I am informed, licensed Faculty 180.  
    29  
    30 I am responsible for identity & access management at UA and have been 
    31 asked to facilitate integration of this application with our SAML/Shibboleth infrastructure for SSO.  Your web site states that Faculty 180 supports authentication via Shibboleth, so I am seeking more technical details of what needs to be done on our side to achieve this integration. 
     127}}}