Simple SAML

[Thermal Reboot]

I agree that I don't think they're using SAML 2.  What I keep getting into
is they're constantly pointing fingers at my testshib server saying it's on
our side.  They did it again today.  I have other SPs that use this just
fine and am having no problems when I use sp.testshib.org.

My next step is to setup a Drupal of my own and see what I have to do to
get that to work.

Regards
-Bob

On Wed, Jun 20, 2018 at 6:00 PM, Michael Young <m.a.young at durham.ac.uk>
wrote:

> On Wed, 20 Jun 2018, Robert Lamothe wrote:
>
> Hi Peter,
>>
>>     Sorry if I confused you.  When I asked for docs or websites I meant to
>> increase my knowledge of Shibboleth.  A Shibboleth for dummies that
>> assumes
>> I know nothing but can take me through all the config files and explain
>> what
>> each does and why and how the components work.  I do refer to the docs on
>> shibboleth.net but I find them very dry and have to drill down several
>> layers as definitions rely on other definitions.
>>
>
> I don't think your problem is at the Shibboleth end. I just tried getting
> a test simplesaml.php 1.15.4 SP to authenticate against a test shibboleth
> 3.3.3 IdP and it used urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST
> according to the idp-audit log. This was essentially just by giving each
> the other's metadata, following the instructions at
> https://simplesamlphp.org/docs/stable/simplesamlphp-sp and using SAML 2.0
> in the simplesamlphp configuration wherever there was a choice. Thus when I
> used the simplesamlphp metadata converter to convert the IdP metadata from
> XML I took the 2.0 version of the output and appended it to the
> metadata/saml20-idp-remote.php file.
>
> Therefore I suspect your simplesamlphp server is not using SAML 2.0 either
> because the relevant 2.0 configuration was missing from the IdP metadata it
> was given, or it has been told not to use it by the way it has been
> configured.
>
>         Michael Young
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180621/9671b073/attachment.html>