SP Request not redirecting to IDP

[junaid.akbar at wipro.com]

-Defined following under virtual host location section, still not working
	ShibRequestSetting entityID https://idpURL...
	Or
 	ShibRequestSetting entityID https://mydomain...


- Generally which property involved in redirecting request to idp? Is it
in shibboleth2.xml or virtual host?


Kind Regards,
Junaid Akbar







On 20/08/2014 15:40, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 8/20/14, 9:51 AM, "junaid.akbar at wipro.com" <junaid.akbar at wipro.com>
>wrote:
>>
>>1. User will access specific URL e.g. mydomain.domain.com
>>2. Apache receive this request and based on entityID
>>https://mydomain.domain.com, user should be redirected to IDP URL.
>
>Then you want to add ShibRequestSetting entityID <entityID> to a Location
>/ block in that virtual host.
>
>>- I am using a domain name e.g. https://mydomain.domain.com and I used it
>>as entityID, do I need to use following URL as
>>'https://mydomain.domain.com/shibboleth?
>
>See EntityNaming in the wiki.
>
>>- I am using external IDP and they provided me metadata which I have
>>copied in /etc/shibboleth/. I used following configuration to define this
>>metadata but what URL I should use and entityID under SSO? When I have
>>defined metadata file then do I really
>>need to define entityID under <sso?
>
>You need a default there, or you need a discovery service, or you need to
>guarantee that ever request will have an entityID content/request setting
>in effect so that the default one never gets used.
>
>>- Few documentations saying that use this type of url,
>>https://myidp.domain.com/idp/shibboleth? We have different URL in
>>metadata than why we need to define it here?
>
>There is no documentation anywhere that says to use that type of URL
>unless the system you're working with is named by such a URL.
>
>EntityIDs are names. Names of other SAML systems are not assigned by you.
>If you help me understand what it is that you don't understand about that,
>then I can help you.
>
>>- After defining all these property how request will route to idp once
>>use hit https://mydomain.domain.com?
>
>If you do what I said to do at the top, then a request to a vhost will use
>the metadata for the entityID specified to lookup the right endpoint to
>redirect to.
>
>-- Scott
>
>-- 
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net


The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com