AssertionConsumerServiceURL with explicit port number

[Cantor, Scott]

On 5/1/13 9:06 PM, "Wei Dai" <Wei.Dai at exlibrisgroup.com> wrote:

>This doesn't work with the IdPs. How can we remove the port number from
>the AuthnRequest? I checked the Apache and SP configurations, but didn't
>find a way to do it.

Nevertheless your web server is misconfigured. If it's including that
port, it (Apache) thinks the protocol is http, not https. I don't know why
it's generating an https:// location, but whatever's going on, Apache is
misreporting things.

>Also, we are using a load balancer in front of two application servers
>where the SPs are installed.

And that's not properly reflected somewhere in the Apache configuration.
I'm sure you're offloading SSL. However you managed to get it to generate
https:// locations, that is hiding the fact that the server still thinks
it's using http.

Shibboleth is not involved in any way.

-- Scott