Making a SP think it's talking to an ADFS server
Cantor, Scott
cantor.2 at osu.edu
Wed Jan 23 16:13:25 EST 2019
On 1/23/19, 3:52 PM, "users on behalf of Mr. Christopher Bland" <users-bounces at shibboleth.net on behalf of chris at fdu.edu> wrote:
> They also require the use or SHA-1 as a hash algorithm, not sure about this one.
Fully documented.
> Lastly for logout and redirect they want an endpoint like
> https://adfs.school.edu/adfs/ls/?wa=wsignout1.0.
That's WS-Federation. If they care about the protocol, then you can't make it work unless you implement enough WS-Fed to fake it and generate responses. If they don't, which is likely, then I suppose you need the web server to rewrite that into /idp/profile/Logout locally.
-- Scott
More information about the users
mailing list