SP Request not redirecting to IDP

[Cantor, Scott]

On 8/20/14, 9:51 AM, "junaid.akbar at wipro.com" <junaid.akbar at wipro.com>
wrote:
>
>1. User will access specific URL e.g. mydomain.domain.com
>2. Apache receive this request and based on entityID
>https://mydomain.domain.com, user should be redirected to IDP URL.

Then you want to add ShibRequestSetting entityID <entityID> to a Location
/ block in that virtual host.

>- I am using a domain name e.g. https://mydomain.domain.com and I used it
>as entityID, do I need to use following URL as
>'https://mydomain.domain.com/shibboleth?

See EntityNaming in the wiki.

>- I am using external IDP and they provided me metadata which I have
>copied in /etc/shibboleth/. I used following configuration to define this
>metadata but what URL I should use and entityID under SSO? When I have
>defined metadata file then do I really
>need to define entityID under <sso?

You need a default there, or you need a discovery service, or you need to
guarantee that ever request will have an entityID content/request setting
in effect so that the default one never gets used.

>- Few documentations saying that use this type of url,
>https://myidp.domain.com/idp/shibboleth? We have different URL in
>metadata than why we need to define it here?

There is no documentation anywhere that says to use that type of URL
unless the system you're working with is named by such a URL.

EntityIDs are names. Names of other SAML systems are not assigned by you.
If you help me understand what it is that you don't understand about that,
then I can help you.

>- After defining all these property how request will route to idp once
>use hit https://mydomain.domain.com?

If you do what I said to do at the top, then a request to a vhost will use
the metadata for the entityID specified to lookup the right endpoint to
redirect to.

-- Scott