UserPassword authn fails with IdP behind reverse proxy

[Manuel Haim]

Hi,

just another note which may be useful:

On IdP back channel requests (usually on port 8443 SSL), an SP must send
its SSL Client Cert to the IdP. If using Apache mod_proxy, the cert is
only added to the HTTP headers of the incoming request, but not to
tomcat's request object.

You may need to add an "org.apache.catalina.valves.SSLValve" as valve to
tomcat's server.xml , so the IdP may access the client cert as part of
tomcat's request object.

-Manuel


> On 7/29/14, 9:43 PM, "Gregory Cook" <gregorc26 at mail.com> wrote:
> 
>> Right, we're using Apache httpd