Walk through creating a client reference in Shibboleth.

Client must provide their Entity ID and the URL to their metadata XML file. If they need fields other than the defaults (eppn, givenName, sn, email) then those must be provided as well.

I'll use University of Wisconsin - Milwaukee as an example.

IdP entityID: ​https://idp.uwm.edu/idp/shibboleth​

Metadata: ​https://wayf.uwm.edu/metadata/uwm-idp-metadata.xml​

1. Make a backup copy of C:\opt\shibboleth-sp\etc\shibboleth\shibboleth2.xml
2. Open shibboleth2.xml for editing in Administrative mode with Notepad++
3. Add a new child element to SPConfig/RequestMapper/RequestMap/Host/Path/Path/ for the client's handle and EntityId
4. Add a new //MetadataProvider element for the client's XML metadata
5. Save the file
6. If the client has non-default field mappings
1. backup C:\opt\shibboleth-sp\etc\shibboleth\attribute-map.xml
2. open attribute-map.xml
3. Add a new unique //Attribute element to the bottom, this example is from TAMU
4. Then map this field to our field in F:\websites\sso\App_Data\attributeOverride.json. Here is the corresponding override for TAMU: 1. { "handles": [ "tamu" ], "overrides": { "Id": "tamuEduPersonUIN" } }
7. Restart the Shibboleth 2 Daemon service.
8. Test out the new SSO Url.