Shibboleth - configuration questions

[Cantor, Scott]

On 11/15/11 6:01 PM, "Karl Woelfer" <kwoelfer at u.washington.edu> wrote:

>"The suffix /Login corresponds to the location of your intended
>SessionInitiator within the SP, and may be some other value..."
> 
>set login.url and link.login.url parameter values to:
> 
>³/Shibboleth.sso/Login?target=https%3A%2F%2Fwiki.example.edu${originalurl
>}²
> 
>I don't know how to interpret this (³location of your intended
>SessionInitiator within the SP²) Can someone please explain what this is
>saying?

If you don't understand how SessionInitiators work, you should refer to
the wiki, but in general if you don't understand them, you're not using
anything other than the defaults and you don't have to worry about it. 2.4
SPs don't do anything but install a default at /Login anyway.

> 
>Second question, our website is accessed with a /wiki suffix. Should the
>full domain name including
>the ³/wiki² be substituted for the  wiki.example.edu above?

a) Don't do this unless you absolutely have to (and you do NOT have to, so
don't do it).

b) It affects lots of the settings. You have to adjust the URLs and you
have to do advanced things with the SP such as modifying the handlerURL to
live beneath the same path at /wiki/Shibboleth.sso, and in turn modifying
the metadata given to IdPs with the updated endpoints. The
wiki.shibboleth.net service is registered in InCommon, and has an example
of a confluence instance running beneath a subdirectory.

-- Scott