Elixer Login First Name mapping

[PRijnbeek]

I found this page @lhjohn:
https://moodle.org/plugins/auth_saml?nonjscomment=1&comment_itemid=100&comment_context=50&comment_component=local_plugins&comment_area=plugin_general

It uses another plugin that allows the data mapping, e.g. Firstname and Lastname etc.

Is this not also possible in the one you are using to fix the current issue?

[lhjohn]

We are using SAML 2.0 already in the form of Shibboleth. The mapping of first name and last name should definitely work and I believe it is also set up correctly.

Currently, I think the problem is with Erasmus MC providing the wrong data to Elixir AAI. So let us test that first with Ed and Dani (I saw your email).

However, I am afraid they will not be able to log in to the dev-academy without registering to the Elixir test environment, which is somewhat non-trivial. Basically, they first need to create the Elixir AAI ID by registering here: http://perun.elixir-czech.cz/fed/registrar/?vo=elixir. Only then can they register to the test environment, which Elixir refers to as Virtual organisations here: http://perun.elixir-czech.cz/fed/registrar/?vo=elixir_test

This must be done in this order, or otherwise the registration request to the test environment cannot be automatically fulfilled by the system (we ran into this problem with Alex and are still waiting for them to manually confirm it).

The support at Elixir told me that the development environment is scheduled to move to the live version of Elixir next week. It may be easier to just wait for that and then ask Dani or Ed to sign in.

[PRijnbeek]

Ok if they have issues maybe you can get them through that process? EMC is connected to Elixer through Sufnet etc. we are not connected to Elixer directly.

If this seems to be too complicated we can indeed postpone it.

"the development environment" i do not really follow, we are in the test environment right?

[lhjohn]

With development environment i meant the development Academy.

[lhjohn]

We can also try to login to Elixir using a Google account instead of our Erasmus MC accounts.

If it provides the first name and last name during login, which are mandatory fields for Google accounts, we could confirm that our current server settings are correct and the problem may indeed be with Surfnet.

However, the Elixir ID for that Google account first needs to be created here: http://perun.elixir-czech.cz/fed/registrar/?vo=elixir and then registered to the Elixir test environment here http://perun.elixir-czech.cz/fed/registrar/?vo=elixir_test

I can look into that next week.

[lhjohn]

I received confirmation that the problem is with the mapping at Elixir.

the problem was that your Identity provider sent us L.H. John as your name and our system badly split it into the title, firstName, and lastName.

[PRijnbeek]

will they solve it?

[lhjohn]

They manually fixed my first name and last name now. I informed them that the problem concerns everyone at Erasmus MC, potentially even everyone in the Netherlands. Still awaiting reply.

[PRijnbeek]

I think they link to surfnet for sure not to Erasmus MC directly. So they have to fix this :)

[PRijnbeek]

I think they link to surfnet for sure not to Erasmus MC directly. So they have to fix this :)

[lhjohn]

Elixir AAI is not entire sure why the mapping is incorrect. According to this documentation of the identity provider in the Netherlands it should work https://wiki.surfnet.nl/display/surfconextdev/Attributes+in+SURFconext.

I checked with Alex and LUMC provides last name as first name, and initials as last name. Erasmus MC seems to provide an empty field as first name and initials as last name through Elixir.