Velocity in new installation of Shibboleth IDP

[Cantor, Scott]

On 6/7/17, 5:47 AM, "users on behalf of Brett Cave" <users-bounces at shibboleth.net on behalf of brettcave at gmail.com> wrote:

> The link to customizing login also references 3 files: conf/authn/password-authn-config.xml, views/login.vm, login.jsp.
> Is login.jsp a legacy file reference in the wiki?

Yeah, should have been deleted, which I did this morning. It isn't relevant to your confusion, you're still not getting how the IdP works fundamentally. You don't ever access the login page, so there's no way to request that.

You send it login requests via SAML or CAS protocol. If the IdP needs to authenticate you, and if the method you configure is Password, then it will use the view template for the login form.

> This brings me back to confusion as per my original post: I initially assumed that having a "login.vm" in the "views" directory of
> shib idp meant I'd be able to view it on /login some how.

No.

> So if login.vm doesn't render anything to a client, how can I access it / use it?

By sending the browser to the IdP at a SAML or CAS login/SSO endpoint.

> Also, while testing SAML, I am able to get a request from the SP to Shib IDP. The request sends me to
> /idp/profile/SAML2/Redirect/SSO with some URL parameters as per the default metadata I provided to the SP

That's the SAML 2 SSO endpoint, per above.

>... And this endpoint is also coming back with a 404.

The status page can't have worked if that returns a 404, since it's all part of the same webapp tree.

-- Scott