Setting up Shibboleth IdP to mock SAML provider

[Peter Schober]

* Brandon Chinn <brandon at leapyear.io> [2019-06-07 03:19]:
> 2. Configure the "SAML2.SSO" profile in `conf/relying-party.xml`
>    * Make sure you include `<property name="encryptionOptional" value="true" />` as a child of the SAML2.SSO bean
>    * I used the RelyingPartyByName bean in RelyingPartyOverrides

Your SP should support encryption instead, of course (for security's
sake). Then there's nothing to turn off on the IDP side.

> 3. Ensure the "authn/Password" is enabled in "conf/authn/general-authn.xml"
>    * I deleted everything else just to be clean, but not necessary
> 4. Enable just the "jaas-authn-config.xml" import in "conf/authn/password-authn-config.xml"

FWIW, for common deployments there's no need to change that file.

> 5. Configure ShibUserPassAuth in "conf/authn/jaas.config"

JAAS is not commonly used in the IDP anymore.

> That checklist ^ would've been so helpful for me, but I couldn't
> find anything like it anywhere.

That checklist is specific to your SP and deployment so once you
realize your own requirements are not the universal case it becomes
clear why a list Just Right for you does not exist.

Glad you got it all working!

-peter