*** This version of Confluence is for testing only and contains a copy of content from June 29th 2026. No changes will be preserved. ***
...
Integrators outside of InCommon who would like to make use of Cornell's Identity Provider may point to the test IDP first and work through any initial issues. When you are ready to move your integration into production, please submit a request at https://shibrequest.cit.cornell.edu to start the process.
Please join Cornell Shibboleth admins mailing list by sending an email to (cornell-shib-users-L-request@cornell.edu with the word join as the subject line. Leave the body of the message blank.l@lists.cornell.edu) using SimpleLists: https://lists.cornell.edu/cornell-shib-users-l/subscribe/ – more information here: https://it.cornell.edu/simplelists/subscribe-e-list-simplelists .
| Info |
|---|
| In the follow up to a critical security advisory that Shibboleth Consortium released on Feb 27 2018, Identity Provider should begin to insist on the use of XML Encryption going forward. From now on, all the new service provider must provide a certificate for encryption in the metadata. |
Cornell IDP Info
Generally, vendors will have the following questions. You can send them a link to this page to get started
...
| Expand | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||||||||||||||||||||||
Currently we release the following public attributes. Other attributes are available but must be configured - please send email to idmgmt@cornell.edu if you don't see the attribute you are looking for. Majority of Service Providers use Attribute Name In SAML Assertion(value in second column) to map to the attribute in their system, but some service providers use Friendly name in SAML Assertion.
TransientId is the default NameID. |
...