Configuring Shibboleth v3 IdP for Unsolicited SSO (IdP Initiated SSO)

[Nate Klingenstein]

Timothy,

> I am new to the list, and relatively new to Shibboleth, so forgive me if I am about to ask something obvious here.

Nothing's obvious until you know about it, right?

> I have the metadata from the vendors SP, but I have no idea what I need to do on my IdP in order to get it to work properly. Whenever I try variations on the URL format given in that wiki article, I get back an error from Shibboleth that
>  states Web Login Service  Unsupported Request. The application you have accesses is not registered for use with this service.

If the metadata works for SP-initiated login, then it should work for IdP-initiated login, but I don't know if you've gotten that style of integration working with this particular vendor.

> I assume that I have to add a Metadata provider, add this guy to the relying-party.xml and set up the attribute filter for it, but it doesnt seem to work like a standard SP initiated SSO does.

My guess is that either you haven't loaded the metadata yet or the entityID that you're using to invoke the unsolicited login is simply different from the one in the metadata.  You can see the entityID in the main EntityDescriptor element of the metadata.

You shouldn't need to change the relying-party.xml file unless they have some special requirements.

Take care,
Nate.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 2147 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190115/8dd982c0/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 2462 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190115/8dd982c0/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.gif
Type: image/gif
Size: 2514 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190115/8dd982c0/attachment-0002.gif>