Has anyone got a working Shibboleth SP in Azure?

[Cantor, Scott]

On 6/22/12 12:10 PM, "Paul Brears" <pbrears at rm.com> wrote:

> 
>I¹ve got Shib SP 2.4.3  in a Azure (Platform as a service web role)
>2008-R2
> 
>The isapi filter loads but doesn¹t seem to work correctly, and doesn¹t
>grab .sso URLs (so Shibboleth.sso/SAML2/POST  and Shibboleth.sso/Status
>fail with a IIS 404.) although when I went to /secure it intercepted the
>request and set it to the IdP so I think did have the right siteID
>configured in Shibboleth2.xml.

I don't know anything about Azure, but you're correct about the behavior.
Your script mapping isn't working. Not uncommon, IIS seems to have trouble
honoring its own settings.

> 
>As the IIS compatibility mode isn¹t installed I¹ve manually added the
>.sso script mapping, loaded the isapi filter and adjusted the file
>permissions to ensure IIS can write log files and access /opt.

Your mapping is probably being overridden by a lower set. The property
inheritance in IIS 7 seems to be hit or miss, and the GUI has a tendency
to do this thing I call "lying". What seems to work is a repeated cycle of
blowing away lower layer mappings or continually telling it to "inherit"
until it stops overlaying the set of mappings with a copy that doesn't
include what you want.

-- Scott