Issues getting GitHub configured to utilize Shibboleth IDP

Cahill, Charles (GE Appliances) Charles.Cahill at ge.com
Wed Aug 12 14:07:16 EDT 2015


Great !  I will give this a try as well.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Charles R. Tompkins
Sent: Wednesday, August 12, 2015 2:05 PM
To: Shib Users
Subject: RE: Issues getting GitHub configured to utilize Shibboleth IDP

I just helped setup github enterprise with Shib (IdPv2).

They aren't supporting encrypted assertions, yet, but they are open to RFE and really quick to fix things that aren't right.

Here's the profile config I'm using:
ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true"
assertionLifetime="PT5M0.000S"
assertionProxyCount="0"
signResponses="never"
signAssertions="always"
encryptAssertions="never"
encryptNameIds="never"


Regards,

Charles Tompkins
UF Information Technology
Enterprise Infrastructure and Operations



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cahill, Charles (GE Appliances)
Sent: Wednesday, August 12, 2015 1:58 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Issues getting GitHub configured to utilize Shibboleth IDP

I thought maybe you meant there was an issues with https.  Not really sure what you meant by this.

"I suppose you're routing messages that aren't encoded with the POST binding to the POST endpoint."

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, August 12, 2015 1:48 PM
To: Shib Users
Subject: Re: Issues getting GitHub configured to utilize Shibboleth IDP

On 8/12/15, 1:40 PM, "users on behalf of Cahill, Charles (GE Appliances)"
<users-bounces at shibboleth.net on behalf of Charles.Cahill at ge.com> wrote:


>
>I am going to double check my SSL backend settings. 

What would possibly make you think this has anything to do with SSL?

The worst thing you can do is change things for no reason. Nothing should ever be changed unless you know exactly why you're changing it and what it means.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list