How to set up simplesaml for the IDP and Shibboleth for the SP Was: Re: Broke - delete user session

[trey]

Notice: This may be a repost, but it seems like my reply wasn't received
before.
===============================================================

Hey Scott,

Thank you for you quick reply.  That's great to hear that Shibboleth
IDP can use MySql. I'd looked into it long ago and had written that
off, thinking it only worked with LDAP+ SQL with a great deal of
hacking.
However, the complexity of setting up the Shibboleth IDP had really
kept me from progressing on it sooner. It's possible I can set it all
up I think (I've tried at least twice) but the value return in
exchange, was just not high enough for what we were neeeding right at the
moment with the time available to work on it. I want to
eventually use Shibboleth for both SP and IDP now knowing that
Shibboleth IDP can indeed use MySql.  That's really good information. Thank
you for
confirming that!
First, I want to use simplesaml as the IDP as a learning exercise and
because it's
just... ...well, "simpler" .

Also, I was also recommended by someone who runs a company managing
Shibboleth installations to not use Shibboleth IDP when it sounded
like I could just use simplesaml for my purpose and that I should
continue with simplesaml since I'm a novice still. So fore now,
simplesaml it is!
Yes, do each one separately and that's it.

-- Scott
This sounds interesting. Indeed! please elaborate... :D

Oh btw, I did get the SP to talk to TestShib. I can log into TestShib after
being
redirected from the SP, and it comes back with attributes that I can use. I
now need to
put the SP metadata inside the simplesaml IDP and the IDP metadata inside
the Shibboleth
SP; I just don't know where to put it (which hosted filed/format?).
I'm wondering if it's, that the metadata is in the wrong place. I'm
going from memory here because I'm not at the computers that have the
Shibboleth SP and simplesaml IDP (links are cached in browser), but I
think I did something like:

At the IDP, generated the IDP metadata the Shibboleth SP side would need at:
http://192.168.23.110/simplesaml/saml2/idp/metadata.php
(got a lot of xml data)

At the SP, generated the  SP medata that the  simplesaml IDP would need at:
http://192.168.23.111/Shibboleth.sso/Metadata
(got a download prompt, contains xml metadata for the Shibboleth SP
including entityID=
line)

Then on the simplesaml IDP side, I used:
http://192.168.23.110/simplesaml/admin/metadata-converter.php
to get the shibboleth SP metadata into a format that simplesaml needed.
Looks like php
code.

I hunted around the internet and determined that I needed to put that
converted text into a file on the IDP, but am not sure which one. Also
I'm not sure where to put the IDP metadata on my Shibboleth SP.

I think I'm almost there but just need a little help on the last part
to get over this hump. Can you help?


Thanks!



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Re-How-to-set-up-simplesaml-for-the-IDP-and-Shibboleth-for-the-SP-Was-Re-Broke-delete-user-session-tp7590739.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.