Shibboleth Setup works on windows - on Linux redirect loop at /idp/profile/SAML2/Redirect/SSO

[Peter Schober]

* morph3us87 at web.de <morph3us87 at web.de> [2013-10-03 18:40]:
> I started the setup from "scratch". And it works now. The problem
> was sometimes ssl and sometimes not. Now I have everywhere SSL.
> But it is very tricky. Every ip combination with
> http(s)://<ip>:<port> must be correct.

That's only due to your choice of building the test environment. If
you had used two boxes (for the IdP and for the application + SP) and
simply had SSL everywhere -- i.e., as you would for a production
environment -- you'd never have to specify ports (using the default
ports for HTTP and HTTPS) and would simply deny (or rewrite) non-SSL
requests at the front door.
For testing the SSL certs can even be self-signed so there's no cost
involved in any of that.
-peter