...
The main proxy use case is when a college is not able to send the CCCID SAML attribute for students. If the Proxy CCC Single Sign-On discovers that the student's CCCID is not present when attempting to authenticate to a particular CCC web application, it will attempt to find the CCCID associated with the IdPs unique identifier (EPPN) for the student.
If a CCCID is not found, the student will be redirected to OpenCCC to either recover or create a new OpenCCC account. Once the account is recovered or created, the CCCID will be cross referenced to the student's EPPN so that the next time a student attempts to login to a CCC web application from their college IdP, the proxy will be find the student's CCCID and add it to the SAML attributes presented to other federation service providers.
Functions of the
...
CCC Single Sign-On
The CCC IdP Proxy service is designed to accomplish several things:
...
This simple diagram illustrates what this looks like:
Before You Begin Integration with the CCC Single Sign-On
Before your college can connect to the CCC Single Sign-On, a set of minimum requirements for integration with the IdP Proxy must be met. Please review the documentation for Prerequisites for Integrating with the Single Sign-On prior to beginning the Single Sign-On integration process. The colleges should ensure that they have an SAML complaint SSO solution in place prior to the integration occurring.
...
- Steps to Integrate with the CCC Single Sign-On
- Attributes for the Proxy: Shibboleth
- Attributes for the Proxy: Portal Guard
- Attributes for the ProxySSO GW: Ellucian
- Overview of Attributes for CCC SSO Federated Access
...