[[DocuSign]]
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
docpublic:systemes:shibboleth:docusign [2021/06/09 15:12] adminjp [static AttributeDefinition for AccountID] |
docpublic:systemes:shibboleth:docusign [2023/10/24 14:46] (current) adminjp [shib IDP attribute-resolver] |
||
|---|---|---|---|
| Line 229: | Line 229: | ||
| ===== shib IDP attribute-resolver ===== | ===== shib IDP attribute-resolver ===== | ||
| - | In the IDP we use the **attribute-resolver-ldap.xml** file to define our customized for DocuSign for NameID mail attribute and permission (employeeType) | + | In the IDP we use the **attribute-resolver-ldap.xml** |
| < | < | ||
| [root@idptest conf]# grep attribute-resolver-ldap.xml services.xml | [root@idptest conf]# grep attribute-resolver-ldap.xml services.xml | ||
| < | < | ||
| - | </ | + | </ |
| + | |||
| + | ==== mapped attributes ==== | ||
| + | |||
| + | in order to map DocuSign domains ID to our mail domains we need to map values | ||
| + | |||
| + | attribute-resolver.xml mapped employeType | ||
| + | |||
| + | < | ||
| + | < | ||
| + | |||
| + | < | ||
| + | < | ||
| + | <!-- Values Prod --> | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | ... | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | |||
| + | </ | ||
| + | |||
| + | </ | ||
| + | |||
| + | idem for staticDSAccountID | ||
| + | |||
| + | < | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | name=" | ||
| + | < | ||
| + | <!-- Values DocuSign Prod --> | ||
| + | <!-- < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | ... | ||
| + | < | ||
| + | < | ||
| + | < | ||
| + | </ | ||
| + | </ | ||
| + | </ | ||
| ==== Mail rewriting ==== | ==== Mail rewriting ==== | ||
| Line 324: | Line 383: | ||
| </ | </ | ||
| - | ==== Special case when unsing NAT ==== | + | ==== Special case when unsing NAT ( checkAddress=" |
| clients in specific site which don't have many public IPs addresses use NAT , and it breaks the flow of using a proxied IDP | clients in specific site which don't have many public IPs addresses use NAT , and it breaks the flow of using a proxied IDP | ||
| Line 333: | Line 392: | ||
| https:// | https:// | ||
| - | in relying-party.xml for our docusign entityIds (we have a prod and dev instances) | ||
| + | from examples in the doc: | ||
| + | * https:// | ||
| + | I understand that I can specify the checkAddress attribute only for those "2nd Hand/ | ||
| < | < | ||
| - | <!-- Container for any overrides you want to add. --> | + | < |
| - | | + | < |
| - | < | + | |
| - | <property | + | |
| < | < | ||
| - | | + | |
| + | < | ||
| + | < | ||
| </ | </ | ||
| - | | + | |
| - | </ | + | <property |
| + | < | ||
| + | <bean parent=" | ||
| + | </ | ||
| </ | </ | ||
