ll

[Brett Cave]

Status page worked. Profile endpoints didnt (saml).

Installed jetty, deployed idp via xml desciptor (same install). Idp works.

Once it was working, the redirect rendered am authentication view. After
doing this i have an authenticated session. Subsequent sp initiated flows
redirect to idp and back to sp - by "login" i was looking for a mechanism
to create a session to test user authentication (not necessarily in a saml
flow)

On 07 Jun 2017 6:41 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

On 6/7/17, 5:47 AM, "users on behalf of Brett Cave" <
users-bounces at shibboleth.net on behalf of brettcave at gmail.com> wrote:

> The link to customizing login also references 3 files:
conf/authn/password-authn-config.xml, views/login.vm, login.jsp.
> Is login.jsp a legacy file reference in the wiki?

Yeah, should have been deleted, which I did this morning. It isn't relevant
to your confusion, you're still not getting how the IdP works
fundamentally. You don't ever access the login page, so there's no way to
request that.

You send it login requests via SAML or CAS protocol. If the IdP needs to
authenticate you, and if the method you configure is Password, then it will
use the view template for the login form.

> This brings me back to confusion as per my original post: I initially
assumed that having a "login.vm" in the "views" directory of
> shib idp meant I'd be able to view it on /login some how.

No.

> So if login.vm doesn't render anything to a client, how can I access it /
use it?

By sending the browser to the IdP at a SAML or CAS login/SSO endpoint.

> Also, while testing SAML, I am able to get a request from the SP to Shib
IDP. The request sends me to
> /idp/profile/SAML2/Redirect/SSO with some URL parameters as per the
default metadata I provided to the SP

That's the SAML 2 SSO endpoint, per above.

>... And this endpoint is also coming back with a 404.

The status page can't have worked if that returns a 404, since it's all
part of the same webapp tree.

-- Scott


--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170607/5806f7d7/attachment.html>