SP setup with SSL offload on F5

[Mathew, Sunil]

Hi,

In Dev, I configured SSL certificate on IIS and everything worked as expected. In Prod, SSL is offloaded on F5. There is no SSL certificate setup on IIS (and no ‘https’ binding). I configured Shibboleth SP with handlerSSL="false". Now I am getting 500 with the following error:
POST targeted at (https://housing-prod.abc.edu/Shibboleth.sso/SAML2/POST), but delivered to (http://housing-prod.abc.edu/Shibboleth.sso/SAML2/POST)

How should Shibboleth SP be setup in this case?


Regards,
Sunil

PS: Environment is Shibboleth Windows SP 3.0.3 on IIS 10 running on Windows Server 2016. I modified all the urls in the SP metadata configured on the IdP from ‘http’ to ‘https’.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190131/6a3a4d50/attachment.html>