Shibboleth SAML in non Standard Ports (https)

Nate Klingenstein ndk at internet2.edu
Sat Apr 25 20:07:41 EDT 2015


Andrés,

It depends on which features you are trying to use.  Most SAML deployments use only this endpoint:

>        <SingleSignOnService
> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
> Location="https://idptest.acasalud.com.ar/idp/profile/SAML2/Redirect/SSO”/ >

However, that's up to you and what you're trying to build.  You just need to make sure that you have the right services advertised.  If you don't support a particular profile, just remove the endpoints.  And, of course, you usually don't want to add a port to your entityID, since it's just a URI string to identify your provider.

Take care,
Nate.


More information about the users mailing list