Softlink Oliver SSO with G-Suite

[beccasdc]

Hi guys

 

I'm having a nightmare trying to set up SSO for the Oliver library system using Google and Softlink are being really unhelpful. I need to know what mappings are needed in the SAML setup for SSO to work. The only document that softlink has provided me with is for SSO using ADFS which is not what we're doing.

 

Thanks for the help in advance!

 

Becca

[dmj]

The attribute mappings for ADFS will be similar (or identical). What does the documentation for ADFS say?

[beccasdc]

Thanks for your quick reply. I would have thought so too but the mappings it gives are:

 

Update the v5 application system Parameter No. 8265 – samlRoleMappings. In the example shown below, the first line samlRoleAttribute=memberOf is required. The remaining lines depend on however you wish to configure the assignment of v5 application User Roles when the borrower is registered.

samlRoleAttribute=memberOf

role1=Administrator

role2=Library Staff

ou1=CN=Admins

ou2=CN=Department Staff

 

In google you can only map it to the basic headings it gives you on the dropdown such as 'First Name' or 'Email Address'

[dmj]

So I suspect memberOf, role1,role2,ou1,ou2 is what Oliver expects to see.

At the very least, you will have to pass a memberOf attribute to Oliver -

Try mapping 'primaryemail' -> memberOf

 

I must say it does look like neither system is very configurable

[beccasdc]

Yes, that doesn't work unfortunately. Thank you though.

 

Hopefully someone who has this set up will see this and send me a screenshot of their mappings! Fingers crossed.

[DavidYoung]

We got Gsuite SSO working through Oauth rather than SAML. If you open the help page from the management section in Oliver: Click (?) in the top-right, and search for Oauth it takes you through the steps to integrate with Google Oauth.