SAML - URI of claim that carries user name / groups

UCS - Univention Corporate Server
#1

Hello,

I’m trying to configure the SAML Plugin for Jenkins
During configuration I’m asked to add the URI of the claim that carries user name and user groups.

Attached I have a screenshot of the default values.
More information about configuration of the SAML Plugins for Jenkins can be found on their wiki: wiki.jenkins-ci.org/display/JENKINS/SAML+Plugin

I’m looking for the URI’s of the claims. Your support is appreciated.

#2

Hi rgerbranda,

cause it’s not clear what you’ve already configured please tell us if and what you’ve done at UCS side.
before you can configure the Jenkins SAML plugin you have to setup the SAML identity provider within UCS. See Univention Wiki here -> http://wiki.univention.de/index.php?title=SAML_Identity_Provider
you may refer to default configurations shipped with the APP to find out what to enter into you Jenkins SAML config.

hopefully that helps…

regards
Nico

#3

Hi Nico,

The solution was quite simple. Just copy the names of the attributes from the SAML response.

Example:
<saml:Attribute Name=“memberOf” NameFormat=“urn:oasis:names:tc:SAML:2.0:attrname-format:basic”>

In this case the “URI of claim that carries user groups” = memberOf

Mastodon