--- General Information doe SHIBBOLETH---

Subboleth YouTube

Sibboleth Academy - Online learning


Looking at a URL like this:
https://shibbodev.vmock.com/vmock/binghamton/Shibboleth.sso/Login?target=https://shibbodev.vmock.com/vmock/shib/attributes.php

The first url in Italics: shibbodev.vmock.com/vmock/binghamton/Shibboleth.sso/Login 
   is where to go and pick up the SHIBBOLETH trust and other info and the Login Page

The second url in Bold:  shibbodev.vmock.com/vmock/shib/attributes.php
is the location to be returned AFTER a succesful authentication.

For the entrries at : https://securetest.binghamton.edu/cas-management/manage.html
The entityID must always be must have really and encod like this: 
https://securetest.binghamton.edu/idp/Authn/ExtCas\?conversation=e1s1&entityId=https(://|%3A%2F%2F)shibbodev.vmock.com(/|%2F)vmock(/|%2F)shibboleth-sp
    %3A - :
    %2F - /
Note the | which is an 'or'.



Server  Path to the Shibboleth
------  -------------------------------------
VENUS      :  cd /u01/app/badm/apps/test/shibboleth-idp
CASIDP     :  cd /u01/app/badm/apps/shibboleth
              cd /u01/app/badm/apps/shibboleth/shibboleth-idp

Wiki       :  wiki.shibboleth.net

JR Install : shibboleth-sp-install.txt
JR XML     : shibboleth2.xml


/u01/app/badm/apps/shibboleth/shibboleth-idp/conf 
attribute-filter.xml     :  The STANZA with ReleaseID <BNUMBER> an enumurated value
                            New entry if not BNUMBER ?????
                            
attribute-resolver.xml   :  NEW values if needed

metadata-providers.xml   :  IF IN INCOMMON -  grep entityID from conf/metadata-providers.xml
                            Needs entry like this if URL is provided.
                               <MetadataProvider id="CAMPUSLABS-PAWS" xsi:type="FileBackedHTTPMetadataProvider"
                               metadataURL="https://federation.campuslabs.com/Shibboleth.sso/Metadata"
                               backingFile="%{idp.home}/metadata/CampusLabs-metadata.xml"/>
                            IF NOT INCOMMON
                               the XML file provided is loaded into the metadata directory
                               and an entry made in ?????

									 
relying-party.xml        :

/???/???
MISC
reload-services          :
test                     :

/u01/app/badm/apps/shibboleth/shibboleth-idp/metadata
vmock-metadata.xml       : needs to be created This is the file VMOCK provides?
InCommon-metadata.xml    : needs an entry?

I noticed the following in the CAS logs today. You have to access the CAS service management interface and create a service for this; I recommend you duplicate the "Service-Now (Test)".

https://securetest.binghamton.edu/cas-management/manage.html


CL info gathering
-------------------
egrep -i 'First|Last|Email|Class|Degree|Major|Graduation'  conf/attribute-filter.xml
grep -R sasmaster *  |cut -d: -f1 |sort -u



 
--- VMOCK ---
SSO CONFIGURATION INFORMATION

SSO Client   SSO Version   Web Server   Programming Language
----------   -----------   ----------   -------------------- 
Shibboleth   SAML 2.0      Apache       PHP 

VMock Metadata Links

Test
-------------------------------------------------------------
https://shibbodev.vmock.com/Metadata/Vmock-test-metadata.xml

Production
-------------------------------------------------------------
https://shibbo.vmock.com/Metadata/Vmock-production-metadata.xml 


Attribute Requirements

Unique Identifier  An identifier that is unique to every student in the platform
                   (e.g. University ID). If any of the other attributes provided
                   is unique then this field is not required.
First Name         utilized for account setup
Last Name          utilized for account setup
Email ID           utilized for account setup and communication
Class Year         utilized for benchmarking
Degree	           utilized for benchmarking
Major              utilized for benchmarking
Graduation Year    first level filter to remove Grad Students



Steps in Integration Process

S.No.   Step                                                              Assigned     
----    ------------------------------------------------------------      ------------------
  1     Agree on the VMock Service URL and attributes to be asserted      VMock / University
  2     Provide University Metadata to VMock                              University
  3     University uses Metadata provided in the Metadata links section   University 
  4     Provide permissions to VMock test and production                  University
        SPs to use University’s test and production IdPs
  5     Provide test accounts for test and production servers             University
  6     Based on if test servers are available, test                      VMock / University
        Shibboleth Integration performed
  7      Launch for production server                                     VMock / University