Shibboleth Identity Provider Configuration

The Digital Archives Shibboleth SP is already registered with InCommon.

Here’s the configuration information campuses can add to their Shibboleth IdP:

<AttributeFilterPolicy id="DigitalArchives"> <PolicyRequirementRule xsi:type="Requester" value="https://archives.calstate.edu/shibboleth" /> <AttributeRule permitAny="true" attributeID="calstateEduPersonOrg" /> <AttributeRule permitAny="true" attributeID="eduPersonPrincipalName" /> <AttributeRule permitAny="true" attributeID="eduPersonAffiliation" /> <AttributeRule permitAny="true" attributeID="email" /> <AttributeRule permitAny="true" attributeID="givenName" /> <AttributeRule permitAny="true" attributeID="surname" /> </AttributeFilterPolicy>

 

If the campus is using the published common release policy in Bitbucket, a policy has already been created and can be downloaded.

Once configured, you can test the login here: Digital Archives

 

See also CSUConnect Service Provider Registration Document.