error in UA-NIH federation?

[David Bantz]

Thanks, I needed that pointer Scott.  If I modify the NIH link to

https://idp.alaska.edu/idp/profile/Shibboleth/SSO?shire=https://nihlogin.nih.gov/affwebservices/public/samlcc&target=https://nihlogin.nih.gov/FederationPortal/Portal.asp&providerId=https://federation.nih.gov/FederationGateway

then I'm correctly authenticated and re-directed to NIH.  

I don't how or why NIH has the link it does; NIH - can you change that please?

Does this mean we're stuck at SAML 1 for NIH federation?

David Bantz


On Wed, 7 Nov 2012, at 12:28 , "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>> Some time ago we set up federation via InC with NIH.  Looking recently to
>> add applications, I find that the link to our institutional login at
>> https://nihlogin.nih.gov/NIHfederation/ViewFederatedUniversities.aspx has
>> the following link:
>> 
>> 
>> https://idp.alaska.edu/idp/profile/SAML2/POST/SSO?shire=https://nihlogin.
>> nih.gov/affwebservices/public/samlcc&target=https://nihlogin.nih.gov/Fede
>> rationPortal/Portal.asp&providerId=https://federation.nih.gov/FederationG
>> ateway
> 
> Well, that's totally wrong. It's a legacy Shibboleth 1.x request format being sent to a SAML 2 POST endpoint.
> 
>> I must be mis-reading these as they appear to me superficially contradictory.
> 
> I don't know what you think is contradictory.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net