Changes between Version 3 and Version 4 of Transact

Timestamp:

02/16/15 15:12:41 (10 years ago)

Author:

dabantz@…

Comment:

--

Transact

@@ -6 +6 @@
 
 David !DeWolfe is primary technical contact with these vendors.
+
+=== 2015.02 problem description ===
+While we thought we had this integration working with the configuration notes below, as of 2015-02 the return query for attributes identifies the user with the scoped UA Username (UAUsername@alaska.edu) which the IdP cannot translate to a principal for which to return attributes. 
+
+Note from David !DeWolfe:
+{{{
+You can log on to the eAccounts Management Portal at:
+
+    https://mgmt-ualaska-sp.blackboard.com/mgmt/login.aspx
+
+Your account name is "dabantz". Stop by and I'll reset your password for you. Once logged on you select:
+
+    "Identity Service Query" under the "Identity Service Setup" heading on the top right of the page
+
+then select:
+
+    "Edit" next to "UA Shib"
+
+then click on the "Test" button. After being taken to our login page and entering  your credentials you are supposed to end up back on the "Identity Service Detail" page where it should display your 30M# and email address. 
+}}}
+
+=== Nearly but not quite correct configuration notes! ===
 
 Transact Service Provider (SP) is configured and tested through an administrative portal at Blackboard.  For the UA integration, David !DeWolfe used this console in consultation with Blackboard and IAM.  Transact integration was unique to UA IAM (as of 2014) in using TWO IdP profiles; it took several weeks of conversation to realize that the SP requests authentication  per usual, receives the SAML assertion from the IdP, BUT THEN ignores or discards the attributes and makes a SECOND call to the IdP using !AttributeQueryProfile to retrieve attributes.  The configuration below reflects this SP behavior.