IIS Shibboleth Host exception
Vruwink, Timothy Roger
vruwink at illinois.edu
Mon Feb 11 16:45:02 EST 2013
Is it possible under Shibboleth SP for Windows (IIS7) to set a hostname exception at the webserver level that states; "if anyone coming from this host connects, do _not_ require them to authenticate"? Our server is currently set to send all requests to shibboleth, we have not specified any secured directories.
We have a shibboleth installation running mostly well under IIS7 as an SP. On its own, it is working as expected. However, when users try to connect to resources on this server from off campus, they are prompted to go through our EZ-Proxy service, which in turn asks them to authenticate (via shibb) and then things break. (sorry for the lack of details here). Since our ez-proxy service already requires shibboleth, we just want to set our other webserver (running shibboleth sp) to not require hosts connecting from the ez-proxy server to re-authenticate.
Tim Vruwink vruwink at illinois.edu<mailto:vruwink at illinois.edu>
Research Programmer, Library IMS
424 Main Library, 1408 W Gregory Dr.
Office: 217-265-0895 Cell: 217-202-1607
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the users