====== Social identity providers ======

This is a bridge documentation for a social identity providers.
Bridge provides a translation between the authentication mechanism of a social identity provider and the SAML2 protocol.

===== Service registration for social IdP =====

<WRAP center round info 100%>
This part of the guide is only for service providers who are not part of eduID.cz federation.

If your service provider is part of eduID.cz federation, follow this [[ https://www.eduid.cz/cs/tech/socialidps | guide]], please.
</WRAP>


Send an email to login@cesnet.cz with the following items:
  *  Service name
  *  Service description
  *  Contact email (we prefer impersonal emails)
  *  SAML2 metadata
  *  Production / testing service
  *  Privacy Policy Url (for production services)
  *  Required attributes together with justification (available attributes see below).

Download the appropriate metadata file and wait for the e-mail confirmation.

===== Available attributes =====

  * **eduPersonPrincipalName**- contains the user identifier of the social provider
  * **displayName**
  * **mail**
  * **schacHomeOrganization** - see bellow

===== Google Social IdP =====

  * **User identifier:** <Google ID>@google.extidp.cesnet.cz
  * **schacHomeOrganization:** google.com
  * [[ https://login.cesnet.cz/google/saml2/idp/metadata.php?output=xhtml | Metadata ]]

===== Facebook Social IdP =====

  * **User identifier:** <Targeted Facebook ID>@facebook.extidp.cesnet.cz
  * **schacHomeOrganization:** facebook.com
  * [[ https://login.cesnet.cz/facebook/saml2/idp/metadata.php?output=xhtml| Metadata ]]


===== LinkedIn Social IdP =====

  * **User identifier:** <LinkedIn ID>@linkedin.extidp.cesnet.cz
  * **schacHomeOrganization:** linkedin.com
  * [[ https://login.cesnet.cz/linkedin/saml2/idp/metadata.php?output=xhtml| Metadata ]]

===== ORCid Social IdP =====

  * **User identifier:** <ORCID ID>@orcid.extidp.cesnet.cz
  * **schacHomeOrganization:** orcid.org
  * [[https://login.cesnet.cz/orcid/saml2/idp/metadata.php?output=xhtml| Metadata]]


===== Github Social IdP =====

  * **User identifier:** <Github ID>@github.extidp.cesnet.cz
  * **schacHomeOrganization:** github.com
  * [[https://login.cesnet.cz/github/saml2/idp/metadata.php?output=xhtml| Metadata]]