dissociate displayed URL from entityID ?

[Chad La Joie]

You'll have to look at your logs.  The entityID is never, ever used as
a URL.  It's main purpose is as a key by which information is looked
up in metadata.  If you're getting redirected to a bad URL then you
probably have a bad URL in your metadata.

On Wed, Oct 12, 2011 at 09:46, Rayene Ben Rayana
<rayene.benrayana at gmail.com> wrote:
> Thanks for this prompt answer!
> I'm a bit confused. There must be something I don't understand.
> In the web browser, when I do not use the url declared as entityID, I am
> able to :
> - access the DS page
> - select an IdP
> - access the IdP page and fill credentials.
> But, when I submit, I get the following error :
> Error Message: Invalid IdP URL (HTTP 404)
>
> Of course, this does not happen when I use the url configured as entityID.
> Misconfiguration ?
>
> On Wed, Oct 12, 2011 at 3:32 PM, Chad La Joie <lajoie at itumi.biz> wrote:
>>
>> The entityID has nothing to do with any of the URLs used by
>> Shibboleth.  Our installers happen to generate an entityID based off
>> the hostname of the system but there is no requirement that be the
>> case (it's just easiest for our scripts).
>>
>> The only requirement is that the entityID be a valid URI.  So you can
>> craft any URL in a domain that you own or any URN using a namespace
>> stem that you own.  Just make sure your configuration and metadata are
>> correct if you change the entityID.
>>
>> On Wed, Oct 12, 2011 at 09:27, Rayene Ben Rayana
>> <rayene.benrayana at gmail.com> wrote:
>> > Dear all,
>> > Is need some way to dissociate the URL displayed in the browser from the
>> > entityID ?
>> > I have an url https://something.local with a valid ssl certificate. It
>> > points to an authentication portal that allows us to authenticate our
>> > visitors before giving them an Internet access. We want to add
>> > shibboleth
>> > authentication to this portal.
>> > However, we don't want to declare https://something.local as entityID in
>> > the
>> > community but something like https://mycompany.net/sp-portal.
>> > Is this possible ?
>> > Some extra info :
>> > - Shibboleth 2.3.1 (Debian)
>> > - Apache2
>> > Thanks in advance,
>> > --
>> > To unsubscribe from this list send an email to
>> > users-unsubscribe at shibboleth.net
>> >
>>
>>
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered