Shibboleth SP not redirecting to the deep link
krrishv
krish.v at gmail.com
Fri Dec 21 13:26:16 EST 2018
Hi Scott, Peter,
I have the apache webserver running in port 80 and weblogic app server
running in same box in port 8000.
I have a DNS alias created for webserver and app server to be people.tu.com.
Do i need to enable SSL on apache side, So we can resolve the secure cookie
issue?
Here is the shobboleth2.xml
Replace the entityID with the one for the your application
<ApplicationDefaults entityID="https://people.tu.com"
REMOTE_USER="username">
Path is changed to /php
<Sessions lifetime="7200" timeout="3600" relayState="ss:mem"
checkAddress="false
" handlerSSL="true" cookieProps="; path=/php; secure; HttpOnly">
Replace the SSO entityID with the one from the Okta app
<SSO entityID="http://www.okta.com/exk9vpvsgsOK2xHzD0x7"
discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
SAML2 SAML1
</SSO>
Uncomment out the local Metadata and change it to point to the
/etc/shibboleth/OktaMetadata.xml file
<MetadataProvider type="XML" validate="true"
file="/etc/shibboleth/OktaMetadata.xml"/>
In Apache side i have this
vi /etc/httpd/conf.d/proxies.conf
And add the following lines:
ProxyPass "/php" "http://people.tu.com:8000/php"
ProxyPassReverse "/php" "http://people.tu.com:8000/php"
<Location /php>
AuthType shibboleth
ShibUseHeaders on
ShibRequestSetting requireSession 1
require shib-session
</Location>
Am i missing anything here. Can you throw some light.
--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list