dissociate displayed URL from entityID ?
Rayene Ben Rayana
rayene.benrayana at gmail.com
Wed Oct 12 14:46:38 BST 2011
Thanks for this prompt answer!
I'm a bit confused. There must be something I don't understand.
In the web browser, when I do not use the url declared as entityID, I am
able to :
- access the DS page
- select an IdP
- access the IdP page and fill credentials.
But, when I submit, I get the following error :
*Error Message: Invalid IdP URL (HTTP 404)*
Of course, this does not happen when I use the url configured as entityID.
Misconfiguration ?
On Wed, Oct 12, 2011 at 3:32 PM, Chad La Joie <lajoie at itumi.biz> wrote:
> The entityID has nothing to do with any of the URLs used by
> Shibboleth. Our installers happen to generate an entityID based off
> the hostname of the system but there is no requirement that be the
> case (it's just easiest for our scripts).
>
> The only requirement is that the entityID be a valid URI. So you can
> craft any URL in a domain that you own or any URN using a namespace
> stem that you own. Just make sure your configuration and metadata are
> correct if you change the entityID.
>
> On Wed, Oct 12, 2011 at 09:27, Rayene Ben Rayana
> <rayene.benrayana at gmail.com> wrote:
> > Dear all,
> > Is need some way to dissociate the URL displayed in the browser from the
> > entityID ?
> > I have an url https://something.local with a valid ssl certificate. It
> > points to an authentication portal that allows us to authenticate our
> > visitors before giving them an Internet access. We want to add shibboleth
> > authentication to this portal.
> > However, we don't want to declare https://something.local as entityID in
> the
> > community but something like https://mycompany.net/sp-portal.
> > Is this possible ?
> > Some extra info :
> > - Shibboleth 2.3.1 (Debian)
> > - Apache2
> > Thanks in advance,
> > --
> > To unsubscribe from this list send an email to
> > users-unsubscribe at shibboleth.net
> >
>
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111012/2b40d524/attachment.html
More information about the users
mailing list