Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The proxy serves two main functions; the first is to include the CCCID as an assertion when the college IdPs are unable to assert the CCCID from their user store.  The second is to aid in the discovery process when navigating across service providers in separate domains.Technically speaking, the proxy is designed to help colleges assert consistent SAML attributes to the various Service Providers (SP) within the CCC SSO Federation.

 


Table of Contents
maxLevel2
minLevel2

...

If a CCCID is not found, the student will be redirected to OpenCCC to either recover or create a new OpenCCC account.  Once the account is recovered or created, the CCCID will be cross referenced to the student's EPPN so that the next time a student attempts to login to a CCC web application from their college IdP, the proxy will be find the student's CCCID and add it to the SAML attributes presented to other federation service providers. 


Functions of the Proxy

The CCC IdP Proxy service is designed to accomplish several things:

...

This simple diagram illustrates what this looks like: 

Image Removed

 

View file
nameCCC Shibboleth Architecture - IdP Proxy v2.pptx
height400


Before You Begin Integration

...

  1. Install an Identity Provider (IdP) software solution such as Shibboleth V3 or Portal Guard, or upgrade your existing Shibboleth IdP to Version 3. (See "Supported IdP Solutions".)
  2. Schedule a Proxy Integration Kick-Off meeting with the CCC Proxy Project team. See Support for contact information.
  3. Set up a test environment to use for testing authentication of your IdP with the Proxy and to other CCC web applications. 
  4. Take steps to join the InCommon Federation and register your IdP and upload your metadata. 
    NOTE: If you have not completed the InCommon membership process by the kick-off meeting, we can still integrate your IdP with the proxy. Once your InCommon membership is complete and your metadata is uploaded to their system, please inform the Proxy Project Team and we will obtain it from InCommon for you.  


Install or Upgrade IdP Solution

...

Before You Begin:  Read Integrating with Canvas

 


Connecting to the Proxy from Hobsons/Starfish

...

The CCC Proxy Project Team will review these steps with you when you meet for your Proxy integration kick-off meeting, Meanwhile, please review the following document and contact the Proxy Project Team if you have any questions.

Before You Begin:  TBD