Where to specify which ACS to use for logging in?

Br LRd blasterradius at gmail.com
Fri Dec 16 10:39:56 EST 2016


That's for the  <>/Shibboleth.sso part; I know for example it also uses the
servername value from (apache) etc, but how do I change Shibboleth to use a
different binding?
I've tried adding

<md:AssertionConsumerService Location="/SAML/Artifact" isDefault="true"
index="1"
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>

into shibboleth2.xml (under Sessions tag), and my authnrequest still has
the

ProtocolBinding as HTTP POST, and AssertionConsumerServiceURL isn't
/SAML2/Artifact.


On Fri, Dec 16, 2016 at 5:35 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 12/16/16, 10:32 AM, "users on behalf of Cantor, Scott" <
> users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:
>
> > https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions
> >
> >    Handlers and Endpoint Construction
>
> That isn't as detailed as I thought it was, but the answer is that the SP
> has to compute the right handler for a resource when it has to derive the
> ACS to use in a request for the resource. All web applications are expected
> to compute scheme, host, and port for a request from the web server's API,
> and on Apache that's how it works. IIS, at least in its original API, has
> no such support, and so the SP has to rely on its own configuration file
> for the information.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161216/aca5c886/attachment.html>


More information about the users mailing list