General Question

[vshulkin]

Scott,
          thank you for the explanation.  You are right I don't have to
worry about Authn Responses however here is the problem I am trying to
solve.  I am looking to migrate from my current IDP to Shibboleth with less
pain as possible.  Reason I was asking is because my current IDP has a
different endpoint compared to Shibboleth.  Which means even though I
created some sort of Proxy with rewrite rules to convert from one URL to
another, Shibboleth does not like it because it was expecting a different
URL in authn request.  So I am getting something like that.

SAML message intended destination endpoint '
https://idp.example.com/sso/idp/samlv20' did not match the recipient
endpoint 'https://idp.example.com/idp/profile/SAML2/Redirect/SSO'

Is there any way to configure Shibboleth to use the same endpoint as old
IDP  /sso/idp/samlv20 instead of  /idp/profile/SAML2/Redirect/SSO?

Thanks a lot.





On Mon, Apr 12, 2021 at 5:27 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/12/21, 5:18 PM, "dev on behalf of vshulkin" <
> dev-bounces at shibboleth.net on behalf of vshulkin at gmail.com> wrote:
>
> > I am asking about Shibboleth IDP.
>
> The IdP doesn't deal in "Authn Responses" unless you're proxying, and that
> endpoint is theoretically changed with the idp.authn.SAML.externalAuthnPath
> property.
>
> The webflows are all mounted in a map [1] that in theory can be customized
> by supplying or merging in a new map bean named shibboleth.FlowMap
>
> None of that is advisable. There's no reason to change the paths and it’s
> never been tested.
>
> -- Scott
>
> [1]
> idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/webflow-config.xml
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20210413/7cabe13d/attachment.htm>