Help Needed with SP HTTPS Reverse Proxy

[Cantor, Scott]

On 9/29/17, 4:28 PM, "users on behalf of David E. Newswanger" <users-bounces at shibboleth.net on behalf of David_Newswanger at berea.edu> wrote:

>  I configured the SP to not handle SSL requests as shown below:

That isn't what that does, and I don't think that's what you want anyway.

> The interesting thing here is that the IDP seems to be hitting an HTTP endpoint (which is inactive), rather than the HTTPS
> endpoint that I configured in the metadata.

The IdP is asked by the SP to respond to http, and it finds no matching enpdoint in the metadata. The metadata is what is matched against, not what it chooses to use.

> I double checked the metadata for this SP a few times and I can't see any reason why the IDP is doing this.

Because it's in the SP's request.

> I've run out of ideas about what might be going wrong here, and I was wondering if any of you guys might be able to point me in
> the right direction?

The only thing you have to do is the one thing you didn't, virtualize your web server. None of this is about the SP, Shibboleth, or metadata and there are no settings required anywhere but your web server except on IIS.

Since it's Apache, your ServerName is wrong and that's really all there is to it.

-- Scott