No Metadata file from IDP
Nate Klingenstein
ndk at internet2.edu
Wed Feb 19 16:42:22 EST 2014
Sam,
If they're expecting you to write their metadata for them, you'll need to generally understand how SAML metadata is structured and what it represents.
https://wiki.shibboleth.net/confluence/display/SHIB2/Metadata
The "URL that generates the SAML assertion (POST)" is... a mysterious concept to me. Maybe they mean an:
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.testshib.org/idp/profile/SAML2/POST/SSO"/>
You may find the TestShib providers' metadata a useful reference, as it's full of comments.
http://testshib.org/metadata/testshib-providers.xml
The internal details of how the IdP performs authentication are opaque to the SP. You're just concerned with the results of the authentication and the IdP will I mean should faithfully report those back to you.
Thanks,
Nate.
On Feb 19, 2014, at 2:34 PM, Sam Jacob <skjacob at gmail.com>
wrote:
> we are using Shibboleth as our SP.
>
> In all cases we get a metadata file from iDP, but this new iDP won't provide us with a file, but will give the "public cert" and a URL that generates the SAML assertion (POST).
>
> What else do i need to manually create the IDP metadata for SP file?
>
> Also , the URL they provided takes me to a login screen where the user would enter the credentials. So, where do i add that URL in the configuration...
>
> Any help appreciated,
> thanks
>
> --
> Sam Jacob
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list