Shibboleth Identity Provider Configuration

The ScholarWork Shibboleth SP is already registered with InCommon.

Here’s the configuration information campuses can add to their Shibboleth IdP:

<AttributeFilterPolicy id="ScholarWorks">
  <PolicyRequirementRule xsi:type="Requester" value="https://scholarworks.calstate.edu/shibboleth" />
  <AttributeRule permitAny="true" attributeID="calstateEduPersonOrg" />
  <AttributeRule permitAny="true" attributeID="eduPersonPrincipalName" />
  <AttributeRule permitAny="true" attributeID="eduPersonAffiliation" />
  <AttributeRule permitAny="true" attributeID="email" />
  <AttributeRule permitAny="true" attributeID="givenName" />
  <AttributeRule permitAny="true" attributeID="surname" />
</AttributeFilterPolicy>

If the campus is using the published common release policy in bitbucket.org, a policy has already been created and can be downloaded.

See also CSUConnect Service Provider Registration Document.