CWMS 2.0 SSO using Shibboleth

[Lee Pipkin]

Has anyone using CWMS 2.0 successfully configured SSO with open source Shibboleth? If so can you give some insight on the configs?  We have it to the point that our CWMS is not accepting the SAML assertions being to sent it from our IdP.

SAML Assertion that is getting rejected from our CWMS Server

https://docs.google.com/document/d/1YGEge6lTm0l9sM1dYwCux5vl9MwT3AcQa6Txodu9pQA/edit?usp=sharing
 

[dpetrovi]

Hi,

CWMS 2.0 hasn't been officially tested with Shibboleth. The following is a list of SAML 2.0 IdPs that have been validated to work with Cisco WebEx Meetings Server:

- Microsoft ADFS 2.0 (a free add-on to Microsoft Windows Server 2008/Windows Server 2008 R2 or AD FS server role in Windows Server 2012)
- Ping Identity Ping Federate 6.6.0.17
- Forgerock Open AM 10.0.0
- CA SiteMinder 6.0 SP5

Dejan

[Fred Nielsen (ePlus)]

Did you ever find a resolution to this?  Looking at a similar integration.

[Lee Pipkin · Accepted solution]

Hi Frederick,

Yes we did. While working with our Shibboleth gurus we got it to work.  We used the NameID format = Persistent identifier and they used custom attributes since there are other systems utilizing Shib here.