Hi Nigel,
We have it working here at QMU, although only as a test.
We initially had a problem with the default config which seemed to
prefer releasing the transientId over the attribute we'd set up as per
the instructions in Rod's e-mail.
So we configured attribute-filter.xml not to release transientId to
Google's SP which fixed the issue.
I have to confess though that we discovered a pretty major issue in our
underlying configuration after getting Google Apps working so I'm not
sure if this is required in every case or was specific to the limited
way we had our IdP working at the time. However it does seem to have
been noticed and logged by other people:
https://bugs.internet2.edu/jira/browse/SIDP-239
Apart from that one issue we followed the default instructions in every
other way.
Regards,
Garry Haining
--
Queen Margaret University, Edinburgh is a registered charity: Scottish
Charity Number SC002750.
-----Original Message-----
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Nigel Bruce
Sent: 14 July 2009 10:56
To: [log in to unmask]
Subject: Shib & Google Apps
Hi
Is anyone using Shibboleth to authenticate access to their Google Apps
domain? If so, please can I have contact details of the technical person
who set it up.
Many thanks
Nigel
Nigel Bruce
Service Group Leader
Information Systems Services
University of Leeds
LEEDS, LS2 9JT
Tel. 0113 343 5384
|