No Metadata file from IDP

Nate Klingenstein ndk at internet2.edu
Wed Feb 19 16:42:22 EST 2014


Sam,

If they're expecting you to write their metadata for them, you'll need to generally understand how SAML metadata is structured and what it represents.

https://wiki.shibboleth.net/confluence/display/SHIB2/Metadata

The "URL that generates the SAML assertion (POST)" is... a mysterious concept to me.  Maybe they mean an:

<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.testshib.org/idp/profile/SAML2/POST/SSO"/>

You may find the TestShib providers' metadata a useful reference, as it's full of comments.

http://testshib.org/metadata/testshib-providers.xml

The internal details of how the IdP performs authentication are opaque to the SP.  You're just concerned with the results of the authentication and the IdP will I mean should faithfully report those back to you.

Thanks,
Nate.

On Feb 19, 2014, at 2:34 PM, Sam Jacob <skjacob at gmail.com>
 wrote:

> we are using Shibboleth as our SP. 
> 
> In all cases we get  a metadata file from iDP, but this new  iDP won't provide us with a file, but will give  the "public cert" and a URL  that generates the SAML assertion (POST).
> 
> What else do i need to manually create the IDP metadata for SP  file?
> 
> Also , the URL they provided takes me to a login screen where the user would enter the credentials. So, where do i add that URL in the configuration...
> 
> Any help appreciated,
> thanks
> 
> -- 
> Sam Jacob
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list