Shibboleth SP, Drupal and IIS setup question

Cantor, Scott cantor.2 at osu.edu
Mon Nov 23 15:34:05 EST 2015


On 11/23/15, 3:13 PM, "users on behalf of Nick Meyer" <users-bounces at shibboleth.net on behalf of meyerjn at uw.edu> wrote:



>My IIS web.config:
>
><rule
> name="Ignore Shibboleth" stopProcessing="true">
>        <match url="Shibboleth\.sso" />
>        <conditions logicalGrouping="MatchAll" trackAllCaptures="false" />
>        <action type="None" />
></rule>

I don't know anything about Drupal, but I don't know what the intent of the above is, it certainly doesn't smell right to me. That isn't how you plug the SP into IIS. The /Shibboleth.sso path has to be mapped into a script mapping that runs a DLL. Maybe that's some kind of Drupal thing, but I thought web.config was something more .NETish.

><Host
> name="staging.sphsc.washington.edu" applicationId="sphsc_local_22">

What you posted doesn't seem to need that override. Your entityID at the default level is the same as your override.

><ApplicationDefaults entityID="http://staging.sphsc.washington.edu/shibboleth"
>REMOTE_USER="eppn persistent-id targeted-id">

><ApplicationOverride id="sphsc_local_22" entityID="http://staging.sphsc.washington.edu/shibboleth" />

Same entityID and it's not doing anything else, so no point to it.

-- Scott



More information about the users mailing list