Initial Setup -- Cannot Get SP and IDP Talking

Nate Klingenstein ndk at internet2.edu
Sun Dec 1 07:37:48 EST 2013


Sam,

It doesn't require that your IdP server be on the Internet because in normal deployments the IdP and SP never directly communicate with one another.  The only requirement is that your client machine(e.g. the web browser) can talk to both the IdP and the SP, so if your client already bridges both networks, you should be set to try it out with TestShib.

Thanks,
Nate.

On Dec 1, 2013, at 12:59 AM, Sam Agnew <saa2012 at qatar-med.cornell.edu<mailto:saa2012 at qatar-med.cornell.edu>>
 wrote:

My team looked with joy at testshib until we realised the server needs to be on the internet to use it. Unfortunately, our security policies and network design don't permit any box we are building to be on DMZ or internet. Therefore we have to fix this some other way.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131201/68cfcda1/attachment.html 


More information about the users mailing list