Making a SP think it's talking to an ADFS server

Cantor, Scott cantor.2 at osu.edu
Wed Jan 23 16:13:25 EST 2019


On 1/23/19, 3:52 PM, "users on behalf of Mr. Christopher Bland" <users-bounces at shibboleth.net on behalf of chris at fdu.edu> wrote:

>   They also require the use or SHA-1 as a hash algorithm, not sure about this one.

Fully documented.

>  Lastly for logout and redirect they want an endpoint like
> https://adfs.school.edu/adfs/ls/?wa=wsignout1.0. 

That's WS-Federation. If they care about the protocol, then you can't make it work unless you implement enough WS-Fed to fake it and generate responses. If they don't, which is likely, then I suppose you need the web server to rewrite that into /idp/profile/Logout locally.
 
-- Scott




More information about the users mailing list