Google Apps sso setup

David Gersic dgersic at niu.edu
Thu Sep 4 14:30:42 EDT 2014


Your metadata configuration looks right to me, pretty much the same as what I have here (working).

Do you also have the RelyingParty definition:

<rp:RelyingParty id="google.com"
   provider="https://idp.niu.edu/idp/shibboleth"
   defaultSigningCredentialRef="IdPCredential">
  <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never" encryptNameIds="never" />
</rp:RelyingParty>

in relying-party.xml ?



>>> On 9/4/2014 at 09:27 AM, Dave Perry <Dave.Perry at hull-college.ac.uk> wrote: 
> Well, this is being tested now and we get the error:
> No peer endpoint available to which to send SAML response
> 
> I've put the following metadata call in,
>         <MetadataProvider                id="google"
>                                                                 
> xsi:type="FilesystemMetadataProvider"
>                                                                 
> xmlns="urn:mace:shibboleth:2.0:metadata"
>                                                                 
> metadataFile="/opt/shibboleth-idp/metadata/google-metadata.xml" />
> 
> And google-metadata.xml has the following:
> <?xml version="1.0" encoding="utf-8"?>
> <EntityDescriptor entityID="google.com" 
> xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
>                 <SPSSODescriptor 
> protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
>                                 
> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDForm
>at>
> 
>                                 <AssertionConsumerService index="1" 
> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
>                                 
> Location="https://www.google.com/a/hull-college.ac.uk/acs" />
>                 </SPSSODescriptor>
> </EntityDescriptor>
> 
> As per one of the guides previously linked to. Can anyone who's got it going 
> check if I'm missing something please?
> 
> Thanks
> _________________________________________________
> Dave Perry
> eLearning Technologist, Hull College Group
> 
> Room L34 - Queens Gardens Library
> Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
> Extension 2230 / Direct Dial 01482 381930
> 
> * Need a fast reply? Try 
> elearning at hull-college.ac.uk<mailto:elearning at hull-college.ac.uk> *
> 
> 
> **********************************************************************
> This message is sent in confidence for the addressee
> only. It may  contain confidential or sensitive
> information.  The contents are not to be disclosed
> to anyone other than the addressee.  Unauthorised
> recipients are requested to preserve this
> confidentiality and to advise us of any errors in
> transmission.  Any views expressed in this message
> are solely the views of the individual and do not
> represent the views of the College.  Nothing in this
> message should be construed as creating a contract.
> 
> Hull College owns the email infrastructure, including the contents.
> 
> Hull College is committed to sustainability, please reflect before printing 
> this email.
> **********************************************************************
> 
> TEXT





More information about the users mailing list