Getting ready for IDP + SP work #174
Conversation
…elescope, not yet configured to work together
config/simplesamlphp-users.php
Outdated
| 'email' => '[email protected]', | ||
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname' => 'Johannes', | ||
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname' => 'Kepler', | ||
| 'http://schemas.microsoft.com/identity/claims/displayname' => 'Johannes Kepler' |
There was a problem hiding this comment.
We better add a few more claims, since we will need a username:
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "[email protected]",
"sAMAccountName": "username"
Give all 3 users unique usernames that match their email address.
Since you're creating this setup, you also get to name the users. If you want to immortalize yourself, now is your chance!
There was a problem hiding this comment.
Should the email and name attributes have the same values? Our Seneca e-mail account should be used for both right?
There was a problem hiding this comment.
Also perhaps I should ask, cause I am not clear about it. What is sAMAccountName? It seems as though from my searching it is an older username that is of the form domain\username as opposed to the email-like [email protected] that we use now. Do we all have these? Are these created by default when an account is made using the prefix of the [email protected] users?
config/simplesamlphp-users.php
Outdated
| NOTE: we add a bunch of claims that we expect to get back from Seneca, | ||
| and need to simulate here. | ||
| */ | ||
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress' => '[email protected]', |
There was a problem hiding this comment.
Change the email address to match the 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name' claim (same email in all claims). Do this for every account.
config/simplesamlphp-users.php
Outdated
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname' => 'Johannes', | ||
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname' => 'Kepler', | ||
| 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'=> '[email protected]', | ||
| 'sAMAccountName'=> 'HeresJohnny', |
There was a problem hiding this comment.
Seneca requires all lowercase, so let's use lowercase for this and email name portion. Same for all accounts.
… case and same email used for both name and email
Small PR to add Samlify and the Simple SAML IDP exactly as it is in telescope, not yet configured to work together.
Closes #105