Test SP using a clone setup + migration and metadata queries

[David Perry]

Hi there

I am deploying a new SP on Windows (Server 2008 R2) - I've installed and partially configured the SP (2.5.2). Including putting the IdP's metadata into the configuration - according to shibd.log, this is being read in fine.

I've got http://siteroot/secure/ to then redirect to the IdP but it's now it's saying SAML 2 SSO profile is not configured for relying party https://heritage.hull-college.ac.uk/secure . The SPurl/Metadata address gives the example metadata, based on the local name of the server (it will be accessed from the outside world via Microsoft Forefront). So can I just edit the example metadata to have the correct entityID and give that to the IdP?

I can't properly test everything yet as the firewall rules still need setting up. And to top it off, I am doing the setup testing on a clone of the live server that will have it running in the end - unfortunately real clients are connecting to the live one and every time you do a reboot or IIS reset it kicks people connected off, and they are quick to notice/complain if they lose their connections.
The clone doesn't have an external hostname either - will I be better off getting it DNS'd internally only as heritage2.hull-college.ac.uk, doing all the setup as that then just change to the 'live' name/entityID of heritage.hull-college.ac.uk when done?
We can set Forefront up to just forward the certificate that's on the server. I believe that this check will fail in the test environment as the hostname is wrong.


Thanks,
Dave

________________________________
David Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930
Message scanned

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130912/8e7effc5/attachment-0001.html