Shibboleth SP in a sandbox without external DNS

Cantor, Scott cantor.2 at osu.edu
Sun Jul 13 16:44:37 EDT 2014


On 7/13/14, 1:47 AM, "Alexey" <strolling.code at gmail.com> wrote:

>My service provider (SP) is deployed on a Tomcat application server in a
>sandbox without external DNS. Identity provider (IdP) is deployed on a
>remote host and I do not have access to it.

The only thing that cares is your client, you can do name resolution
anyway you want to.

>How do I configure metadata of SP? What exactly I'm interested in:
>
>Attribute value *entityID* of the element *EntityDescriptor*

Read the documentation on what an entityID is, it is *not* a location.

>Attribute value *Location* of the element *AssertionConsumerService*

You set it to something that will resolve for your client.

>If I specify IP addresses and ports, SP-initiated Web SSO does not work.

It does, so you're doing something incorrectly. But if it doesn't work,
then pick a name, and set it in your client's hosts file.

Or just get an external DNS entry. It's not that hard.

-- Scott



More information about the users mailing list