How to determine ACS URL

[Peter Schober]

* Mark Neidig <mneidig at ftni.com> [2015-02-03 17:49]:
> I'm told my company is a current Shibboleth user. I am replacing the
> developer that initially set up our Shibboleth. Our SSO code is in
> place and functional. I just need to add another client and I am
> having trouble determining the next step. I'm being asked for our
> ACS URL.

Then you're like running the Shibboleth Service Provider (SP)
software, i.e., you're using it to protect some resource that's made
available to others via SAML WebSSO.

Here's the home of the current documentation:
https://wiki.shibboleth.net/confluence/display/SHIB2/
Then chose "Configure" in the left box:
https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration
Then "Talk to a New Identity Provider" in the middle box:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddIdP

What the client wants are the essential communication parameters for
your Shibboleth SP software. The standardized format to communicate
them is SAML metadata. You can generate the SAML metadata for your own
SP (which also details your ACS URLs) by using the provided 'metagen'
tool from the SP distribution.
You can also find an approximation (!) of your SAML metadata at
https://yourserver.example.com/Shibboleth.sso/Metadata
At taking the ACS URL values from there should be fine, provided
you're accessing this URL at the right vhost (in case there are
several pointing to the same system) and also provided the Shibboleth
"handler" (the path the webserver knows belongs to the Shibboleth
software) is the default value, /Shibboleth.sso

HTH,
-peter