Running Shibboleth behind proxy
Tella, Prudhvi
ptella at sdsc.edu
Fri Feb 7 19:38:33 EST 2014
Sorry if I wasn't clear. We are installing Shibboleth SP behind a corporate proxy server. We are not the IDP.
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, February 07, 2014 4:16 PM
To: Shib Users
Subject: Re: Running Shibboleth behind proxy
Also, note that this isn't practical as a concept unless you control every SP. You can't make others' SPs communicate how you want them to. HTTP proxies are not intended here, and what you publish in the metadata is expected to be a TLS-capable endpoint. How you achieve that is entirely your choice, but the way you're trying to do it isn't workable from a federation point of view.
That's relevant if you're not in control of every SP.
-- Scott
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list