SP Request not redirecting to IDP

[junaidakb]

Hi,

If you looked at my previous inputs on this thread, specially 20 August 2014
14:51 where i have provide my configurations and summery of what i am trying
to achieve,

I am trying to achieve following simple scenario,

1. User will access specific URL e.g. https://mydomain.domain.com

2. Apache receive this request and based on entityID  and virtualhost
configurations, https://mydomain.domain.com, user should be redirected to
IDP URL mentioned in shibboleth2.xml and in metadata file.

3- Once User authenticated, IDP returned with SAML Token and
Apache/Shibboleth should allow user to access actual contents e.g.
https://mydomain.domain.com


Let me share my vhost.conf and ssl.conf file configuration for my domain,

Vhost.conf
------------
<VirtualHost *:80>
  ServerName aral-de-amitest.navitas.bpglobal.com
  DocumentRoot /navitas/www/cq/cache/content/aral/de

  AcceptPathInfo On

  UseCanonicalName On

  <Location />
    AuthType shibboleth
    Require shibboleth
    ShibRequireSession On
    require valid-user
    ShibRequestSetting entityID
https://accessuat.bpglobal.com/fim/sps/saml20/saml20/logininitial?RequestBinding=HTTPPost&PartnerId=http://aral-de-amitest.navitas.bpglobal.com/&NameIdFormat=Email&AllowCreate=false
    #ShibCompatWith24 On
    ShibRequestSetting requireSession 1
    #require shib-session
  </Location>

    RewriteEngine On
</VirtualHost>

ssl.conf
---------
<VirtualHost *:443>
    SSLEngine on
    ServerName aral-de-amitest.navitas.bpglobal.com
    DocumentRoot /navitas/www/cq/cache/content/aral/de

    RewriteEngine On

    AcceptPathInfo On

    UseCanonicalName On

  <Location />
    AuthType shibboleth
    Require shibboleth
    ShibRequireSession On
    require valid-user
    ShibRequestSetting entityID
https://accessuat.bpglobal.com/fim/sps/saml20/saml20/logininitial?RequestBinding=HTTPPost&PartnerId=http://aral-de-amitest.navitas.bpglobal.com/&NameIdFormat=Email&AllowCreate=false
    #ShibCompatWith24 On
    ShibRequestSetting requireSession 1
    #require shib-session
  </Location>

    ErrorLog logs/ssl_error_log
    TransferLog logs/ssl_access_log
    #LogLevel warn

    SSLOptions +StrictRequire
    SSLCertificateFile /etc/ssl/certs/server.crt
    SSLCertificateKeyFile /etc/ssl/private/server.key
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

I would also like to share my shibboleth2.xml file configuration as well,
which i have share earlier on the same thread,

<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    clockSkew="180">

    <ApplicationDefaults
entityID="https://aral-de-amitest.navitas.bpglobal.com/"
                         REMOTE_USER="eppn persistent-id targeted-id">

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="true" cookieProps="http">

            <SSO
entityID="https://accessuat.bpglobal.com/fim/sps/saml20/saml20">
                      SAML2 SAML1
            </SSO>

            <Logout>SAML2 Local</Logout>

            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
            <Handler type="Session" Location="/Session"
showAttributeValues="false"/>
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        </Sessions>
        <Errors supportContact="root at localhost"
            helpLocation="/about.html"
            styleSheet="/shibboleth-sp/main.css"/>

        <MetadataProvider type="XML"
file="saml20_BP_metadata_TFIM_UAT_22AUG2013.xml"/>
        <AttributeExtractor type="XML" validate="true" reloadChanges="false"
path="attribute-map.xml"/>
        <AttributeResolver type="Query" subjectMatch="true"/>
        <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>
        <CredentialResolver type="File" key="sp-key.pem"
certificate="sp-cert.pem"/>

    </ApplicationDefaults>

    <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>

    <ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>

</SPConfig>

Can you look at above details and let me know if anything missing.

Regards,
Junaid Akbar







--
View this message in context: http://shibboleth.1660669.n2.nabble.com/SP-Request-not-redirecting-to-IDP-tp7605614p7606147.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.