What we've settled on is this: Zoom Email mapped to EPPN, and we deny release of email address to Zoom. We've tried a combo of Zoom Email mapped to email and Zoom Employee Unique ID to EPPN/employeeNumber, but all that did was create a complex account identifier, where if either changed it resulted in an error or a new account.
Those with EPTIDs could not be easily invited to meetings. We had a school use email address and eduPersonTargetedID as a fallback and if our users suppressed their email address the user would be logged into a new account based on their EPTID. The primary account identifier for Zoom is whatever attribute you put in the Zoom Email Address in the SAML mapping. We've done extensive SSO testing with Zoom and this is what we found. Subject: Re: Configuring Shibboleth for Zoom I forgot to mention that we also do automatic role, group, and license-type assignment based on eduPersonEntitlement, and the Zoom system uses a first match wins process.Įach of the role, group, and license assignments are independent and can all use separate values from the EPE attribute. Next message (by thread): Configuring Shibboleth for Zoom.Previous message (by thread): Configuring Shibboleth for Zoom.Configuring Shibboleth for Zoom Mak, Steve makst at
0 kommentar(er)
