Simple SAML

[Michael Young]

On Wed, 20 Jun 2018, Robert Lamothe wrote:

> Hi Peter,
> 
>     Sorry if I confused you.  When I asked for docs or websites I meant to
> increase my knowledge of Shibboleth.  A Shibboleth for dummies that assumes
> I know nothing but can take me through all the config files and explain what
> each does and why and how the components work.  I do refer to the docs on
> shibboleth.net but I find them very dry and have to drill down several
> layers as definitions rely on other definitions. 

I don't think your problem is at the Shibboleth end. I just tried getting 
a test simplesaml.php 1.15.4 SP to authenticate against a test shibboleth 
3.3.3 IdP and it used urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 
according to the idp-audit log. This was essentially just by giving each 
the other's metadata, following the instructions at 
https://simplesamlphp.org/docs/stable/simplesamlphp-sp and using SAML 2.0 
in the simplesamlphp configuration wherever there was a choice. Thus when 
I used the simplesamlphp metadata converter to convert the IdP metadata 
from XML I took the 2.0 version of the output and appended it to the 
metadata/saml20-idp-remote.php file.

Therefore I suspect your simplesamlphp server is not using SAML 2.0 either 
because the relevant 2.0 configuration was missing from the IdP metadata 
it was given, or it has been told not to use it by the way it has been 
configured.

 	Michael Young