Nuxeo and Shibboleth

[Cantor, Scott]

On 6/4/13 10:27 PM, "Brian Tingle" <Brian.Tingle at ucop.edu> wrote:
>
>>From what I can tell from google translate; the SP needs to be running
>>locally in an ajp proxy configuration, and the loginURL and logoutURL
>>match up with sections of shibboleth2.xml that I don't seem to have in
>>the shibboleth2.xml that testshib.org created for me.  I need sections
>>like this in my shibboleth2.xml

No, that's all built in.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceLogout

The equivalence is described in the last paragraph before the example
boxes on those pages.

The default locations are /Shibboleth.sso/Login and /Shibboleth.sso/Logout.


>Do you know if testshib.org has something equivalent URL value I can put
>in to SessionInitiator type="WAYF"?   Or does it not have a WAYF because
>it is not a federation?

There is no discovery service, no, and you don't need one or any of that
old XML.

-- Scott