Nuxeo and Shibboleth

[Brian Tingle]

I found a wiki for it in french:

https://www.esup-portail.org/display/PROJESUPECM/Configuration+de+shibboleth

http://www.esup-portail.org/display/PROJESUPECM/Trucs+et+astuces

>From what I can tell from google translate; the SP needs to be running locally in an ajp proxy configuration, and the loginURL and logoutURL match up with sections of shibboleth2.xml that I don't seem to have in the shibboleth2.xml that testshib.org created for me.  I need sections like this in my shibboleth2.xml

<SessionInitiator type="Chaining" Location="/wayf" id="WAYF" relayState="cookie">
 <SessionInitiator type="WAYF" acsIndex="5" URL="https://services-federation.renater.fr/test/wayf"/>
</SessionInitiator>

<LogoutInitiator type="Chaining" Location="/Logout">
 <LogoutInitiator type="Local"/>
</LogoutInitiator>

Do you know if testshib.org has something equivalent URL value I can put in to SessionInitiator type="WAYF"?   Or does it not have a WAYF because it is not a federation?

Thanks for your patience -- Brian

________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Tuesday, June 04, 2013 6:55 PM
To: Shib Users
Subject: Re: Nuxeo and Shibboleth

On 6/4/13 9:22 PM, "Brian Tingle" <Brian.Tingle at ucop.edu> wrote:

>Does anyone use Nuxeo with Shibboleth?

Never heard of it.

>I can't find any way to export metadata for registration.  And it does
>not have a shibboleth2.xml; it has a
>shibboleth-login-config.xml

shibboleth2.xml is part of the Shibboleth SP. Nothing that isn't that will
ever have one.

>Is there a way I can calculate the loginURL and logoutURL from the
>shibboleth2.xml I downloaded from testshib.org?

I don't know if that even makes any sense, but since the testshib.org SP
doesn't live on whatever server you're running this thing on, that
wouldn't be possible. Perhaps it assumes you have locally installed it,
and like confluence, it wants you to link it to a pair of local URLs that
cause login and logout to happen.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net