Moving SSL cert to the edge breaks Shibboleth

[Michael Ottoson]

Thanks for the fast response!

I would love to use Apache, but that's not an option.

Can you help me understand (or link to a doc that does)?  We've been using Shibboleth for months successfully.  We haven't changed any names - only moved the cert.

BTW: total novice here - I know just enough to be dangerous.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: November 20, 2017 3:12 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Moving SSL cert to the edge breaks Shibboleth

> We are almost there. There is one snag: Shibboleth.

No, the snag is that you haven't virtualized the web server's configuration. IIS does not support that (It doesn't have the equivalent of Apache's ServerName directive). So it isn't even technically something you should do, you should use Apache. If you want to use IIS in a way that it does not in fact support, the SP includes a partial workaround to virtualize the site parameters as documented, in the <Site> elements in its configuration.

-- Scott

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net