Configuring Shibboleth IdP for Mentis

Mentis supports shibboleth as an authentication option. However to get it to work, there are few things that you need to do on your end. 

1. Configure your Idp to accept us as a service provider. 

Please use these links for your setup.

Staging:
ACS: https://yourunivstaging.mentisonline.com/saml/module.php/saml/sp/saml2acs.php/mentissp
Logout: https://yourunivstaging.mentisonline.com/saml/module.php/saml/sp/saml2logout.php/mentissp

Production
ACS: https://yourproductionurl/saml/module.php/saml/sp/saml2acs.php/mentissp
Logout: https://yourproductionurl/saml/module.php/saml/sp/saml2logout.php/mentissp

Please note that the staging SP changes can be removed once shibboleth configuration is successfully deployed to production. 

2. Release the following attributes to the SP

<AttributeRule attributeID="eduPersonPrincipalName">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="surname">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="givenName">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="email">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="uid">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>
<AttributeRule attributeID="eduPersonPrimaryAffiliation">
<PermitValueRule xsi:type="basic:ANY" />
</AttributeRule>

Please also verify that your IdP has been configured to send a transient NameID.

3. Request a vendor/courtesy account for us to test and service your setup. Please make sure that all the attributes being released for the vendor/courtesy account have values in order for us to successfully test your shibboleth setup.