Open access control for testing

[Cantor, Scott]

On 8/11/20, 1:06 PM, "Mathew, Sunil" <smathew at hbs.edu> wrote:

>    It is not working. I was not able to find any documentation on opening up access control.

If you want all clients allowed, install shibboleth.Conditions.TRUE as a predicate via shibboleth.PredicateAccessControl

I don't know what any of this has to do with Tomcat's proxy list. Proxies are not the addresses the IdP should be seeing. You need to forward client addresses through the proxies and the IdP's rules are in terms of the client, not the proxy.

-- Scott