Config of Shibboleth - Debug Question

Cantor, Scott cantor.2 at osu.edu
Wed Nov 12 16:52:20 EST 2014


On 11/12/14, 9:29 PM, "Joseph Corso" <jcorso at scansoftware.com> wrote:
>
>In the Relying party federation metadata in ADFS, the link is as follows.
>
>https://shib.campuscafesoftware.local/Shibboleth.sso/Metadata (SP 
>installed here)

ADFS does not support automated use of remote metadata sources, as it 
can't do that safely and is missing many features needed to make that 
workable.

The SP handler is not meant to be used to provide metadata directly to a 
peer in any case, it's for example use in preparing metadata to provide to 
federations or to partners out of band.


For testing, of course, it's fine, but bad habits while testing inevitably 
become production.

As for the error, that's on Microsoft. But since you're doing essentially 
the two things I'm suggesting you shouldn't do above, you can take that 
for what it's worth.

-- Scott



More information about the users mailing list