Shib and ADFS 2.0 Help

[Randy Wiemer]

Windows Server 2008 R2 was released in the fall of 2009.  ADFS version 2 was 
released in the spring of 2010.

Randy

-----Original Message----- 
From: Etan Weintraub
Sent: Tuesday, July 03, 2012 1:03 PM
To: Shib Users
Subject: RE: Shib and ADFS 2.0 Help

Jean Marie-
Thank you so much, this was the tip that got me down the process path that 
eventually got it all working. Who would have thought that the latest 
version of Windows wouldn't include the latest ADFS as a role....stupid 
Microsoft ;p

-Etan E. Weintraub
Sr. Systems Engineer
Directory Architecture
IT at Johns Hopkins
Johns Hopkins at Mt. Washington
5801 Smith Ave.
Suite 3110B
Baltimore, MD 21209
Phone: 410-735-7945
E-mail: eweintra at jhmi.edu


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On 
Behalf Of THIA Jean-Marie
Sent: Sunday, July 01, 2012 9:35 AM
To: Shib Users
Subject: RE: Shib and ADFS 2.0 Help

Hi Etan,

If your web application is not "claim" aware, ADFS won't help you. You can 
or use WIF as Micheal said but it will only work with a .Net application. It 
might be easier to setup a Shibboleth SP if you use other language.

Anyway if you want to setup an ADFS box, be sure to use ADFS 2 download from 
MS site and not the ADFS role embedded in Windows. This link might help 
http://www.sysadminsblog.com/microsoft/installing-and-configuring-adfs-2-0/

Jean Marie


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On 
Behalf Of Etan Weintraub
Sent: vendredi 29 juin 2012 17:31
To: Shib Users
Subject: RE: Shib and ADFS 2.0 Help

Yea, I found that document, unfortunately it assumes you have ADFS setup and 
running completely already, and nothing about how to get ADFS setup, even 
when you go into their document that they reference as an assumed starting 
point that talks about setting up and ADFS application. I couldn't find 
anything about setting up ADFS as a web agent piece...

I really hope I don't have to setup an entire ADFS infrastructure just for 
one application that can't talk native Shib.....

-Etan E. Weintraub
Sr. Systems Engineer
Directory Architecture
IT at Johns Hopkins
Johns Hopkins at Mt. Washington
5801 Smith Ave.
Suite 3110B
Baltimore, MD 21209
Phone: 410-735-7945
E-mail: eweintra at jhmi.edu


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On 
Behalf Of Chad La Joie
Sent: Friday, June 29, 2012 11:27 AM
To: Shib Users
Subject: Re: Shib and ADFS 2.0 Help

I don't have a link to it, but try searching on MS's site.  They hired some 
one, a while back, to produce a document that gave step-by-step instructions 
in setting up ADFS as both an IdP and an SP and operating against the 
relevant Shib relying party.  The document (like MS in
general) completely side-stepped anything related to trust but at this point 
you know enough to handle that I think.

On Fri, Jun 29, 2012 at 11:16 AM, Etan Weintraub <eweintra at jhmi.edu> wrote:
> Hi all-
>
> So I have a need to get Shibboleth and ADFS working together in a
> situation where I will use a Shibboleth IdP to talk to an ADFS Relying 
> Party.
> Unfortunately, I have no clue how to get from where I am now (fully
> functional Shibboleth IdP and a stand-alone Win2K8 R2 Web Server
> that's in my AD Domain) to the end point. I've found some documents on
> the Wiki as to how to get from a working ADFS setup to using Shib as
> the IdP, but no instructions (even when following through link after
> link within the
> documents) on how to get the ADFS stuff working on the web server in
> the first place.
>
>
>
> Does anyone have an end-to-end step-by-step guide for configuring
> Shibboleth as the IdP and ADFS as the SP?
>
>
>
> Thanks!
>
>
>
> -Etan E. Weintraub
>
> Sr. Systems Engineer
>
> Directory Architecture
>
> IT at Johns Hopkins
>
> Johns Hopkins at Mt. Washington
>
> 5801 Smith Ave.
>
> Suite 3110B
>
> Baltimore, MD 21209
>
> Phone: 410-735-7945
>
> E-mail: eweintra at jhmi.edu
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



--
Chad La Joie
www.itumi.biz
trusted identities, delivered
--
To unsubscribe from this list send an email to 
users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to 
users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to 
users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to 
users-unsubscribe at shibboleth.net