Grouper Users - Open Discussion List

[Olivier Salaün <>]

Hi Chad,

I think most IdP no more manage attribute-release per SP manually, but make use of RequestedAttribute information contained in the SAML metadata to define global attribute release policies.

However https://grouperdemo.internet2.edu/shibboleth does not provide such information; at least not in eduGain metadata.

You can check on <https://technical.edugain.org/entities>.

Could you consider completing that SP's metadata?

Le 03/03/2021 à 19:09, Redman, Chad a écrit :

        Yes, that is the last piece of the puzzle. Per 
          Information about accessing the demo server on the demo
        main page, you can either have your IDP release ePPN
        (eduPersonPrincipalName) to the SP, or you could use "Social
        login by Cirrus" as the IDP and then can use a social login like
        Google.

---

From: on behalf of Takeshi Nishimura
Sent: Tuesday, March 2, 2021 5:04 AM
To:
Subject: Re: [grouper-users] Grouper demo site?

 

Hi Olivier,

Thanks for the information!

After trying login, it resulted the following error. Maybe I must send ePPN.

> Error: invalid identifier: {0}, either you are not allowed to register or your identity department needs to release the eduPersonPrincipalName to this server.

Takeshi

> 2021/03/02 18:44、Olivier Salaün wrote:
>
> Hi Takeshi,
>
> It seems that https://grouperdemo.internet2.edu/shibboleth has been registered in eduGain yesterday.
>
> However it may take some time until it gets republished in your national federation SAML metadata.
>
> <gbfhcobcobnhmkhb.png>
>
> Le 01/03/2021 à 16:51, Takeshi Nishimura a écrit :
>> Thanks, Oliver.
>>
>> I thought I should add the SP's metadata but want to be confirmed before that.
>> Additionally the SP seems to join InCommon.
>>
>> https://met.refeds.org/met/entity/https%253A%252F%252Fgrouperdemo.internet2.edu%252Fshibboleth/
>>
>>
>> I wonder what is right...

-- 
Olivier Salaün
DSI / pôle SI / équipe SNUM
Tel : 02 23 23 74 54