Installation Resources

[Fred Newtz (frnewtz)]

Hello,

I have gone through multiple attempts now to get Shibboleth configured and working properly in our environment.  The installation is easy enough, it is obviously the configuration after the fact where you need a PhD in Shibboleth.  We are using a 3rd party SP (SAML2.0 compliant), that has been tested and works with Shibboleth in different environments, and want to integrate the Shibboleth IdP (3.3.0) with Active Directory as an LDAP source.  I just need four active directory attributes to be passed, cn, sn, mail, isMember (Group Membership).  Company is an optional value that could also be passed, but that is unimportant.

This seems like a fairly straight forward and standard configuration, but finding information that is still relevant for the latest version of Shibboleth is elusive at best.  Does anyone have any suggestions on links to read over to help me understand the best way to go through the configuration to ensure that everything is working as it should.  The link to the configuration page is nice, but it only lists out all of the configuration files and doesn’t really give an order of operations in the best way to go through the configuration and how to test each component to ensure it is working before moving on to the next component.

I have found a few guides on getting Shibboleth IdP installed and configured and working with various SP’s and LDAP backends.  Including Apache Directory Server, but that is not working 100% either at this point.  I can’t imagine there is not a single resource out there that I can use to get a working IdP installation with a valid LDAP configuration on the back end.


Thanks,

Fred


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170210/603ab9e7/attachment.html>