WOW! Thanks for sharing your registry entry. I did get this working and it actually was pretty straightforward. My registry entry was way smaller but I’m going to research those parameters now!
Thanks! From: Robert Bond [mailto:[email protected]] Sent: Friday, May 15, 2020 10:53 AM To: [email protected] Cc: Keith Alston (Staff) <[email protected]> Subject: Re: [cas-user] Re: CAS V5.3 with Zoom SSO??? Are you running into any issues? You need to have SAML setup first. Here is a modified copy of our service registry entry: (modify attributes as needed) { "id" : 12, "@class" : "org.apereo.cas.support.saml.services.SamlRegisteredService", "metadataLocation" : "https://regent.zoom.us/saml/metadata/sp";, "metadataExpirationDuration" : "PT60M", "signAssertions" : true, "skipGeneratingAssertionNameId" : false, "skipGeneratingSubjectConfirmationInResponseTo" : false, "skipGeneratingSubjectConfirmationNotOnOrAfter" : false, "skipGeneratingSubjectConfirmationRecipient" : false, "skipGeneratingSubjectConfirmationNotBefore" : true, "signResponses" : true, "encryptAssertions" : false, "metadataCriteriaRoles" : "SPSSODescriptor", "metadataCriteriaRemoveEmptyEntitiesDescriptors" : true, "metadataCriteriaRemoveRolelessEntityDescriptors" : true, "signingCredentialType" : "BASIC", "serviceId" : "regent.zoom.us<http://regent.zoom.us>", "name" : "Zoom", "logo" : "/cas/images/services/zoom_logo.png", "description" : "Zoom", "evaluationOrder" : 12, "usernameAttributeProvider" : { "@class" : "org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider", "usernameAttribute" : "mail", "canonicalizationMode" : "NONE", "encryptUsername" : false }, "attributeReleasePolicy" : { "@class" : "org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy", "allowedAttributes" : [ "java.util.ArrayList", [ "givenName", "mail", "surname", "memberOf" ] ] }, "logoutType" : "BACK_CHANNEL", "logoutUrl" : "https://regent.zoom.us/saml/SingleLogout";, "accessStrategy" : { "@class" : "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy", "enabled" : true, "ssoEnabled" : true } } On Fri, May 15, 2020 at 7:08 AM Shawn Cutting <[email protected]<mailto:[email protected]>> wrote: We are using pure SAML with Zoom, and it was not the easiest thingto setup, but it is working. What have you tried thus far? On Tuesday, May 12, 2020 at 5:37:03 PM UTC-4, Keith Alston (Staff) wrote: Anyone set up Zoom SSO with CAS?? Any pointers/tips?? -Keith Alston [email protected]<mailto:[email protected]> Regent University 757-619-3421 -- - Website: https://apereo.github.io/cas<https://urldefense.com/v3/__https:/apereo.github.io/cas__;!!CHfpmW4!zV3g_3AIBn3tGL_r9M53MUbT8FyxPjj7xxpKv11147-fSKUSRgTxvTvPuagCLXTy$> - Gitter Chatroom: https://gitter.im/apereo/cas<https://urldefense.com/v3/__https:/gitter.im/apereo/cas__;!!CHfpmW4!zV3g_3AIBn3tGL_r9M53MUbT8FyxPjj7xxpKv11147-fSKUSRgTxvTvPuQA9cgzO$> - List Guidelines: https://goo.gl/1VRrw7<https://urldefense.com/v3/__https:/goo.gl/1VRrw7__;!!CHfpmW4!zV3g_3AIBn3tGL_r9M53MUbT8FyxPjj7xxpKv11147-fSKUSRgTxvTvPueO_unHa$> - Contributions: https://goo.gl/mh7qDG<https://urldefense.com/v3/__https:/goo.gl/mh7qDG__;!!CHfpmW4!zV3g_3AIBn3tGL_r9M53MUbT8FyxPjj7xxpKv11147-fSKUSRgTxvTvPuf0jvnk5$> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/128fffa9-c0da-40b9-9873-acb5698b22f6%40apereo.org<https://urldefense.com/v3/__https:/groups.google.com/a/apereo.org/d/msgid/cas-user/128fffa9-c0da-40b9-9873-acb5698b22f6*40apereo.org?utm_medium=email&utm_source=footer__;JQ!!CHfpmW4!zV3g_3AIBn3tGL_r9M53MUbT8FyxPjj7xxpKv11147-fSKUSRgTxvTvPueZGp6NX$>. -- Robert Bond Network Administrator (918) 444-5886 Northeastern State University -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/BL0PR10MB2995D76802A41A8AC9B39E9CD9B40%40BL0PR10MB2995.namprd10.prod.outlook.com.
