Configuring SSO for Shibboleth (using Gluu)

You can integrate the Clumio service with Shibboleth (using Gluu).

Prerequisites

Ensure that you have the following before you start configuring Gluu:

• Gluu account with admin privileges

• The Clumio Entity ID and Assertion Consumer Service URL

See Getting SSO service provider information from Clumio dashboard for instructions on how to get that information from the Clumio Dashboard.

Configure Shibboleth as an IdP for Clumio Service

1. Log on to your Gluu dashboard, click SAML > Add Trust Relationships.

   

2. Under Trust Relationship Form, enter the following:

   Display Name:Clumio   
   Description: Clumio Trust  
   Entity Type: Single SP  
   Metadata Location: File  
   SP Metadata File: Select the Clumio SP metadata XML file  
   

3. Enable the Configure Relying Party field and click Configure Relying Party.

   

4. Under Relying Party Configuration, add a profile configuration of SAML2SSO and click the SAML 2 SSO Profile after adding it.

   

5. Scroll down in the profile to NameID Formats and add SAML1.1:nameid-format:emailAddress field as shown below. Click Save.

   

6. From the right section, select the following fields to add them to the Trust Relationship.

   • Display Name

   • Email

   • First Name

   • Last Name

   • Username

   

7. Click SAML > Trust Relationships and confirm that the Clumio configuration is present as shown below.

   

8. Verify that the Email attribute has a SAML2 URI configured. Go to Configuration > Attributes. Click Email and ensure that it is active as shown below.

   

9. If SAML2 URL is not configured, configure it with the following value:
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress. Scroll down and click Update.

   

10. Navigate to SAML > Trust Relationships and then confirm that the Clumio service Validation Status is Success and the Status_ is _Active as shown below.

    

Contact support@clumio.com with any questions or concerns.