Page History

...

• Most information can be found at https://support.zoom.us/hc/en-us/articles/201363003-Getting-Started-with-SSO
• You need to choose what attributes to use. Best are:
  • eduPersonTargetedID, ePTI
  • Surname, sn
  • givenName
  • urn:mace:dir:attribute-def:givenName
  • urn:mace:dir:attribute-def:sn
  • urn:mace:dir:attribute-def:mail
  • eduPersonTargetedID/NameID
    with NameIDFormat = urn:oasis:names:tc:SAML:2.0:nameid-format:persistentemail
• Decide if you want to connect to our test or our production environment. You must upload the SURFconext IdP metadata file to Zoom to complete the SAML setup.
  • To connect to the SURFconext Test Environment use the following metadata and save this as an XML:
    
    1. https://metadata.test.surfconext.nl/idp-metadata.xml. If asked, the following applies:
       1. IdP login url: https://engine.test.surfconext.nl/authentication/idp/single-sign-on/key:20190208
       2. IdP certificate is the Assertion signing certificate as found on https://metadata.test.surfconext.nl/ (engine.test.surfconext.nl 20190208 certificate)
       3. IdP issuer: https://engine.test.surfconext.nl/authentication/idp/metadata
       4. IdP binding: choose "HTTP - Redirect"
  • In case you want to configure the connection for your production IdP, connect to the SURFconext Production Environment using the following data:
    
    1. https://metadata.surfconext.nl/idp-metadata.xml
       1. IdP login url: https://engine.surfconext.nl/authentication/idp/single-sign-on/key:20181213
       2. IdP certificate is the Assertion signing certificate as found on https://metadata.surfconext.nl/ (engine.surfconext.nl 20181213 certificate)
       3. IdP issuer: https://engine.surfconext.nl/authentication/idp/metadata
       4. IdP binding: choose "HTTP - Redirect"
• You need to send SURF the metadata you get from Zoom after your URL is approved. Note: getting your 'vanity URL' approved by Zoom can take some time (especially in times of demand for the service).

The 'vanity URL' (which must be at least four characters long) might contain the abbreviation of the institution like 'surf.zoom.com' resulting in the application URL like 'https://surf.zoom.us/'.  The location of the SAML metadata than will be 'https://surf.zoom.us/saml/metadata/sp'.