Stuck on first page of IDP

[K, Amit (MIND)]

Hey Kai,

Thanks for the response.

Actually it is a test setup which I am doing one of my local env. just to explore the features of the product.

Let me try to explain the actual buisness case here:

1. We have our own product and have around 500 customer now (might be more in future).

2. These customer may have their own existing application(s) and users as well. So after having our product they will own more than one application(Their   own existing application(s) and one is our product). And now will need SSO feature for both application with common credential.

3. So total no of users who will use application in actual = NO OF CUSTOMERS(Organization)*NO OF EMPLOYEES AVAILABLE IN ORGANIZATION.

4. Every customer (which is an organization actually) will have their own admin account and will add/configure application(s) and user in IDP server using some available UI  in IDP server. (I am expecting that inbuilt UI already available).

5. After registering user and mapping application with user, any user can sign on to application.

6. This sign on can be by SP initiated (Go to SP portal and get authenticated login/by IDP) or IDP initiated (Login to IDP server and see associated registered application list and just click on application to SSO).

It would be SAML auth only and for now we are assuming our customer those want this SSO feature will have SAML auth enabled in their application.

Right now we are using OKTA and getting this facility there and want to replace OKTA SSO by this product.

Thanks,
Amit

-----Original Message-----
From: Kai Zimmer [mailto:zimmer at bbaw.de]
Sent: Friday, August 2, 2019 12:45 PM
To: Shib Users <users at shibboleth.net>; K, Amit (MIND) <Amit.K at mind-infotech.com>
Subject: Re: Stuck on first page of IDP

Hi,

can you give more details on the setup you're planning:
- is this just a test setup for yourself (single user) or do you need a production system (maybe for hundreds of users)
- do you have an LDAP server in place
- what is the web application (service provider aka SP) you're aiming to use with this IDP

Next step would be to get a list of attributes the service provider requires to login (e.g. mail, uid, lastname ...).

Then you will have to *configure* your IDP so that it supports those attributes (probably reads them from your LDAP).

On the page you mentioned there are some links to configuration descriptions - although i doubt if they're sufficient for a production
system:
 >https://www.fukr.org.uk/?p=21
 >https://www.fukr.org.uk/?p=24

Best,
Kai


Am 02.08.19 um 08:05 schrieb K, Amit (MIND):
> Actually I attached the screenshot in last email to give the more detail what I am seeing as landing page by below URL:
>
> http://my-ipaddress:8080/idp/status
>
> The  text showing on that page is like below:
>
> There is an HTML page I am seeing:
>
> On Header:
> 1. There is a dummy logo having text on it "Our Identity Provider".
>
> On body:
> 1. "Web Login Service - Access Denied "
> 2. " You do not have access to the requested resource. "
>
> On Footer:
> 1. Insert your footer text here.
>
> I followed the URL to install the product:
> https://www.fukr.org.uk/?p=8
>
> Please let me know if further detail is required.
>
>
>
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Peter
> Schober
> Sent: Thursday, August 1, 2019 11:06 PM
> To: users at shibboleth.net
> Subject: Re: Stuck on first page of IDP
>
> * K, Amit (MIND) <Amit.K at mind-infotech.com> [2019-08-01 15:47]:
>> I just installed the IDP on Ubuntu and found the first page like attached page.
> Also it would help if you stopped sending images and instead simply copy/paste-d the relevant text from whatever error you're looking at.
> (I.e., send the text itself, not a pixelised image created thereof.)
>
> I don't load images in my mail client (and noone should be loading
> remote images unless they intend to be tracked by all kinds of email
> senders) and plain text can be searched, indexed and found by others (or yourself, should you encouter the same issue again in the future).
>
> -peter
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> ________________________________
>
> The information contained in this electronic message and any
> attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus/trojan/worms/malicious code transmitted by this email. www.motherson.com



________________________________

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus/trojan/worms/malicious code transmitted by this email. www.motherson.com