IIS Shibboleth Host exception

Vruwink, Timothy Roger vruwink at illinois.edu
Mon Feb 11 16:45:02 EST 2013


Quick Question:
Is it possible under Shibboleth SP for Windows (IIS7) to set a hostname exception at the webserver level that states; "if anyone coming from this host connects, do _not_ require them to authenticate"?  Our server is currently set to send all requests to shibboleth, we have not specified any secured directories.

Longer version:
We have a shibboleth installation running mostly well under IIS7 as an SP.  On its own, it is working as expected. However, when users try to connect to resources on this server from off campus, they are prompted to go through our EZ-Proxy service, which in turn asks them to authenticate (via shibb) and then things break. (sorry for the lack of details here). Since our ez-proxy service already requires shibboleth, we just want to set our other webserver (running shibboleth sp) to not require hosts connecting from the ez-proxy server to re-authenticate.

Thank you.


Tim Vruwink      vruwink at illinois.edu<mailto:vruwink at illinois.edu>
Research Programmer, Library IMS
424 Main Library, 1408 W Gregory Dr.
Office: 217-265-0895   Cell: 217-202-1607

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130211/cd922046/attachment-0001.html 

More information about the users mailing list