Shibboleth with AWS Cloudfront

[Wessel, Keith]

Is your AWS load balancer speaking http instead of https to the web server running the SP? If so, you need to get the SP to accept cookies and traffic from non-HTTPS endpoints.

Keith


From: users <users-bounces at shibboleth.net> On Behalf Of Sylvia, Shannon
Sent: Wednesday, November 13, 2019 5:10 PM
To: users at shibboleth.net
Subject: Shibboleth with AWS Cloudfront

Hello all,

I have spent days trying to understand why simple index.html websites that work fine in our inhouse Linux environment using Shibboleth with the same configuration files goes into a loop when I create the websites on AWS, using AWS Linux 2, AWS Application Load Balancer, CloudFront and Route 53.

It all appears to go through and connect to the Idp, it brings back the Idp metadata.  I am told the Idp is able to update the SP metadata.

It is simply using apache 2.4 on AWS Linux 2 – very straight forward.  It is not using Elastic IPs, so the IP addresses are not fixed.

Does anyone have suggestions for this architecture?

Thanks so much in advance,
S. Sylvia

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191113/b6433ed5/attachment.html>