SP setup with SSL offload on F5

[Nate Klingenstein]

Sunil,

Since IIS doesn't support virtualization very well, there are special configuration directives you can add to shibboleth2.xml to handle this.  The following article should be exactly what you need.

https://wiki.shibboleth.net/confluence/display/SP3/SSLOffloading

Thanks,
Nate.
 
-----Original message-----
> From: Mathew, Sunil
> Sent: Thursday, January 31 2019, 11:37 am
> To: users at shibboleth.net
> Subject: SP setup with SSL offload on F5
> 
> 
> 
> Hi,
> 
> In Dev, I configured SSL certificate on IIS and everything worked as expected. In Prod, SSL is offloaded on F5. There is no SSL certificate setup on IIS (and no ‘https’ binding). I configured Shibboleth SP
>  with handlerSSL="false". Now I am getting 500 with the following error:
> 
> POST targeted at (https://housing-prod.abc.edu/Shibboleth.sso/SAML2/POST), but delivered to (http://housing-prod.abc.edu/Shibboleth.sso/SAML2/POST) <http://housing-prod.abc.edu/Shibboleth.sso/SAML2/POST)>
> 
> How should Shibboleth SP be setup in this case?
> 
> Regards,
> 
> Sunil
> 
> PS: Environment is
> Shibboleth Windows SP 3.0.3 on IIS 10 running on Windows Server 2016. I modified all the urls in the SP metadata configured on the IdP from ‘http’ to ‘https’.
> 
> --
> 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
>