Moving SSL cert to the edge breaks Shibboleth

[Cantor, Scott]

> Can you help me understand (or link to a doc that does)?

If you're asking me to explain how web server virtualization works, I guess I would suggest you read the Apache ServerName documentation, I don't know of any particularly good source on the basics of web server deployment. If you're talking about the SP workaround, it's under NativeSPISAPI in the wiki.

>  We've been using Shibboleth for months successfully.  We haven't changed any names - only
> moved the cert.

That cannot break it. You changed the virtualization of the site, you had to have. I would imagine it was physically https before and now it's physically http and still logically https. So you MUST tell the web server that it is in fact logically running on https. Which you cannot do, IIS doesn't support that, but you can hack it by telling the SP that in the <Site> element that's already present, using the scheme attribute.

-- Scott