Issues getting GitHub configured to utilize Shibboleth IDP

Charles R. Tompkins crt at ufl.edu
Wed Aug 12 14:04:40 EDT 2015


I just helped setup github enterprise with Shib (IdPv2).

They aren't supporting encrypted assertions, yet, but they are open to RFE
and really quick to fix things that aren't right.

Here's the profile config I'm using:
ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true"
assertionLifetime="PT5M0.000S"
assertionProxyCount="0"
signResponses="never"
signAssertions="always"
encryptAssertions="never"
encryptNameIds="never"


Regards,

Charles Tompkins
UF Information Technology
Enterprise Infrastructure and Operations



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cahill,
Charles (GE Appliances)
Sent: Wednesday, August 12, 2015 1:58 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Issues getting GitHub configured to utilize Shibboleth IDP

I thought maybe you meant there was an issues with https.  Not really sure
what you meant by this.

"I suppose you're routing messages that aren't encoded with the POST binding
to the POST endpoint."

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, August 12, 2015 1:48 PM
To: Shib Users
Subject: Re: Issues getting GitHub configured to utilize Shibboleth IDP

On 8/12/15, 1:40 PM, "users on behalf of Cahill, Charles (GE Appliances)"
<users-bounces at shibboleth.net on behalf of Charles.Cahill at ge.com> wrote:


>
>I am going to double check my SSL backend settings. 

What would possibly make you think this has anything to do with SSL?

The worst thing you can do is change things for no reason. Nothing should
ever be changed unless you know exactly why you're changing it and what it
means.

-- Scott

-- 
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-- 
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4793 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20150812/2d07ed59/attachment.p7s>


More information about the users mailing list