SnipeIT

SnipeIT Notes

Login With Shibboleth/SAML

  1. Note at : https://uci.atlassian.net/wiki/spaces/IAMDOCS/pages/9372281/General+Shibboleth+SAML+Topics
    Click login on the top right to view. 

     
  2. Go to settings -> SAML
  3. Enable SAML
  4. SAML IDP Metadata - > https://shib.service.uci.edu/metadata.xml
  5. Attribute Mapping - Username -> urn:oid:2.16.840.1.113916.5.6.1.1
  6. Enable "Make SAML primary login"
  7. Download Metadata button -> Click and attach to the OIT Request.
  8. OIT Request:

    OIT Shibboleth New Request

         Would you like assistance filling out the form? = No

         Service Name = <YOUR SERVICE NAME>

         Service Description = <YOUR SERVICE DESCRIPTION>

         Campus Sponsor = <YOUR NAME HERE>

         Unit/Department Sponsor = <YOUR DEPT HERE>

         Administrative Contact = <YOUR ADMIN CONTACT>

         Technical Contact = <YOUR NAME HERE>

         Help Desk Contact = <YOUR HELP DESK EMAIL>

         Entity ID = <YOUR WEBSITE URL HERE>

         User Population = <WHO USES THIS? STAFF? STUDENTS? ETC?>

         Requested Attributes = ucinetID@uci.edu

Add users with LDAP & Filters

DO NOT IMPORT ALL PEOPLE AT ONCE. YOU WILL BREAK YOUR DATABASE AND NEED TO RESTORE A BACKUP.

 (Settings -> Backup)

Speaking of which, make a backup before you follow these instructions.

Prerequisite: You must have an account that can view the information you want to get from your users.
1. Settings -> LDAP

2. Enable LDAP

3. Fill in LDAP server, LDAP password, LDAP user

4. Bind DN -> dc=uci,dc=edu

5. Set your LDAP filter for a certain department or group of people you want to import.

For example: &(&(eduPersonAffiliation=Faculty)(departmentNumber=IR8073)) 

Get the department number from the LDAP attribute sheet at https://docs.google.com/spreadsheets/d/1oalZMcZKvZmCj-rLNeuQwrm3gUpYjcF3upkeB4r4Up4/edit#gid=2088883341

6. Fill out the bindings as shown below:

image.png

7. Click test LDAP synchronization and make sure you are getting the results you want. 

MAKE A BACKUP.

8. People -> LDAP sync on the top right. You can import the people from the LDAP filter you set in step 5.

9. If you don't have the right people imported, restore your backup.