How to set up simplesaml for the IDP and Shibboleth for the SP Was: Re: Broke - delete user session

[Cantor, Scott]

On 10/21/13 3:27 PM, "trey" <trey at westcampus.net> wrote:

>Oh btw, I did get the SP to talk to TestShib. I can log into TestShib
>after being redirected from the SP, and it comes back with attributes
>that I can use. I now need to put the SP metadata inside the
>simplesaml IDP and the IDP metadata inside the Shibboleth SP; I just
>don't know where to put it (which hosted filed/format?).

We use SAML metadata in the standard format, and that's what you need to
supply.

> 
>At the SP, generated the  SP medata that the  simplesaml IDP would need
>at:
>http://192.168.23.111/Shibboleth.sso/Metadata
>(got a download prompt, contains xml metadata for the Shibboleth SP
>including entityID= line)

Doing that is going to give you examples that use IP addresses for
endpoints instead of hostnames, and no SSL. That can be more complex to
test with than a real environment.

>I hunted around the internet and determined that I needed to put that
>converted text into a file on the IDP, but am not sure which one.

I wouldn't know.

> Also I'm not sure where to put the IDP metadata on my Shibboleth SP.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataProvid
er

You have many options, a local file in /etc/shibboleth being the simplest.

There are examples in the configuration already.

-- Scott