I'm working on integrating Shibboleth with NetApp. Is the process pretty similar for configuration that you know of? We want to use smart card authentication with it.
Hi John, I appreciate the good work you've done demonstrating how to Delegating Office 365 Authentication to Shibboleth IdP. You made me understand more about shibboleth IdP. Thank you. I just have one question. Will the configuration of shibboleth IdP be the same ( office 365 ) if we're trying authenticate using Google Cloud Directory Sync? I meaning I will be dealing the same conf files in IdP? I appreciate your thoughts on this.
The integration between Shibboleth IdP and GSuite is similar in many ways. Almost all of the files modified for Office 365 will be used, but Google does have some different requirements that will need to be accounted for. I would think you can figure the differences by referencing Google SAML integration documentation, but if you need additional assistance I'd recommend reaching out to Unicon at www.unicon.net/contact-us. We could get you going pretty quickly.
Hi John, I am trying to implement your solution in my organization but I want to use openldap and the employeeNumber field instead of objectGUID. Could you show me the path how to do it? I will be very grateful. greetings PS Great tutorial
Essentially, you have no significant changes. You will just change any references of objectGUID to employeeNumber. Since employeeNumber is not binary, you don't need the extra config item I reference around 12:34. Otherwise, just update the ldap.properties file to use OpenLDAP instead of AD and you should be good to go. If you have other questions, feel free to reach out to us.
Good morning One question, I would like to acquire the solution but I have a question, to federate the domain is it necessary to have an ADFS service or role implemented? Thank you
Hello Rey, ADFS is not required when delegating Office 365 Authentication to Shibboleth Idp, Shibboleth handles federation. If you have any additional questions please reach out to us at www.unicon.net/contact-us and we'll be happy to assist.
Hi John, I want to configure my sample application with shibboleth. I am not able to get how to do configurations in shibboleth files. What are configuration need to made if the application is asp.net mvc application.
From the IdP, the configuration will be very similar to Office 365. At a minimum, you'll need to add a reference to the SP's metadata and add an attribute release filter policy to permit the IdP to send user attributes to the SP. On the your asp.net mvc app's side, you'll need to add a .NET library or IIS pipeline module that allows your application to speak SAML 2.0. You've got several choices, including using the Shibboleth SP. If you need additional assistance I'd recommend reaching out to Unicon at www.unicon.net/contact-us. We'd love to help you out.
Hello Unicon, Inc. I am following along with this on a test tenant, but the link for the companion document no longer works. Can you update the link so I can have the companion document?
I would like to thank you for this professional explanation. It has very helpful.
I'm working on integrating Shibboleth with NetApp. Is the process pretty similar for configuration that you know of? We want to use smart card authentication with it.
Hi John, Could you please show the SAML response generated by Shibboleth IDP ?
Hi John, I appreciate the good work you've done demonstrating how to Delegating Office 365 Authentication to Shibboleth IdP. You made me understand more about shibboleth IdP. Thank you.
I just have one question.
Will the configuration of shibboleth IdP be the same ( office 365 ) if we're trying authenticate using Google Cloud Directory Sync? I meaning I will be dealing the same conf files in IdP?
I appreciate your thoughts on this.
The integration between Shibboleth IdP and GSuite is similar in many ways. Almost all of the files modified for Office 365 will be used, but Google does have some different requirements that will need to be accounted for. I would think you can figure the differences by referencing Google SAML integration documentation, but if you need additional assistance I'd recommend reaching out to Unicon at www.unicon.net/contact-us. We could get you going pretty quickly.
Hi John,
I am trying to implement your solution in my organization but I want to use openldap and the employeeNumber field instead of objectGUID. Could you show me the path how to do it?
I will be very grateful.
greetings
PS Great tutorial
Essentially, you have no significant changes. You will just change any references of objectGUID to employeeNumber. Since employeeNumber is not binary, you don't need the extra config item I reference around 12:34. Otherwise, just update the ldap.properties file to use OpenLDAP instead of AD and you should be good to go. If you have other questions, feel free to reach out to us.
Good morning
One question, I would like to acquire the solution but I have a question, to federate the domain is it necessary to have an ADFS service or role implemented?
Thank you
Hello Rey,
ADFS is not required when delegating Office 365 Authentication to Shibboleth Idp, Shibboleth handles federation. If you have any additional questions please reach out to us at www.unicon.net/contact-us and we'll be happy to assist.
Hi John,
I want to configure my sample application with shibboleth. I am not able to get how to do configurations in shibboleth files. What are configuration need to made if the application is asp.net mvc application.
From the IdP, the configuration will be very similar to Office 365. At a minimum, you'll need to add a reference to the SP's metadata and add an attribute release filter policy to permit the IdP to send user attributes to the SP. On the your asp.net mvc app's side, you'll need to add a .NET library or IIS pipeline module that allows your application to speak SAML 2.0. You've got several choices, including using the Shibboleth SP. If you need additional assistance I'd recommend reaching out to Unicon at www.unicon.net/contact-us. We'd love to help you out.
Hello Unicon, Inc. I am following along with this on a test tenant, but the link for the companion document no longer works. Can you update the link so I can have the companion document?
That link is managed by Microsoft. It looks like they got the link updated to redirect to the related documentation.