What are the minimum Shibboleth server on IIS configuration requirements?

Peter Schober peter.schober at univie.ac.at
Sun Jan 26 09:35:31 EST 2014


* Craig Caughlin <craigcaughlin at gmail.com> [2014-01-26 15:25]:
> What needs to minimally be done to successfully set up a Shibboleth server
> (after the successful installation of the software itself, of course)? I
> have my server with IIS installed and I can see, by testing, I DO have the
> basic Shibboleth install up and running successfully.

https://wiki.shibboleth.net/confluence/display/SHIB2/
-> Configure (left column)
https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration
-> Native Service Provider: Getting Started
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted

> I *think* I need to install a certificate (to force https connections) and
> I know I need to modify the shibboleth2.xml for my unique environment.
> Right?

Nothing in Shibboleth /requires/ the use of HTTPS at all. That's just
a common sense requirement for a resource that's proteced with
sessions and HTTP Cookies.
How to configure HTTPS for your webserver and platform is fully out of
scope for Shibboleth. I'd get the TLS/SSL configiuration for your
webserver done first (it should work fine with http and https
requests), only then look at Shibboleth.

> Do any of these look like good guides for me to follow if I'm brand
> new to this software?

I'd look though some of the stuff from "Understading Shibboleth"
https://wiki.shibboleth.net/confluence/display/SHIB2/UnderstandingShibboleth
linked from the SHIB2 space home page.
Then follow Getting Started, as indicated above.
-peter


More information about the users mailing list