Shibboleth - configuration questions

Cantor, Scott cantor.2 at
Wed Nov 16 05:08:49 GMT 2011

On 11/15/11 6:01 PM, "Karl Woelfer" <kwoelfer at> wrote:

>"The suffix /Login corresponds to the location of your intended
>SessionInitiator within the SP, and may be some other value..."
>set login.url and link.login.url parameter values to:
>I don't know how to interpret this (³location of your intended
>SessionInitiator within the SP²) Can someone please explain what this is

If you don't understand how SessionInitiators work, you should refer to
the wiki, but in general if you don't understand them, you're not using
anything other than the defaults and you don't have to worry about it. 2.4
SPs don't do anything but install a default at /Login anyway.

>Second question, our website is accessed with a /wiki suffix. Should the
>full domain name including
>the ³/wiki² be substituted for the above?

a) Don't do this unless you absolutely have to (and you do NOT have to, so
don't do it).

b) It affects lots of the settings. You have to adjust the URLs and you
have to do advanced things with the SP such as modifying the handlerURL to
live beneath the same path at /wiki/Shibboleth.sso, and in turn modifying
the metadata given to IdPs with the updated endpoints. The service is registered in InCommon, and has an example
of a confluence instance running beneath a subdirectory.

-- Scott

More information about the users mailing list