Configuring external AssertionConsumerService, and documentation for protocols.xml

[Langlois, Charles]

What I'm trying to do is have an assertion consumer service that is implemented outside shibboleth. There's a reply URL configured in the Azure IdP that is not shibboleth's default.
I need to change shibboleth's config to match the IdP.

Are you telling me what I want to do is impossible? That Shibboleth cannot advertise an ACS URL that it does not handle itself?

There's also the question of the protocols.xml file. Is there documentation on how to change that file for my needs?

Thanks.


Charles Langlois

Digital Tech Developer Sr. Analyst

Mobile: +1<tel:(438)888-0680>(514)-892-2258
Accenture Interactive

5605 avenue de Gaspé, Suite 902

Montréal, QC, Canada - H2T 2A4

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: August 21, 2020 2:01 PM
To: Shib Users <users at shibboleth.net>
Subject: [External] Re: Configuring external AssertionConsumerService, and documentation for protocols.xml

This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments.

On 8/21/20, 12:42 PM, "users on behalf of Langlois, Charles" <users-bounces at shibboleth.net on behalf of charles.langlois at accenture.com> wrote:

> is it possible to specify a URL for an assertion consumer service that is not part of the shibboleth url namespace?

I don't know what you mean by "shibboleth url namespace".

If you're trying to ask if you can have an ACS location that isn't within/under the typical /Shibboleth.sso handler base path, no, you can't.

You can change the handler path itself with the handlerURL parameter (and in some cases other changes) but whatever it is, the ACS has to be under the path specified by the setting, and the fact that it happens to be /SAML2/POST or whatever is not really terribly important or useful to change.

-- Scott


--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=1sSCfrzfrI6WiH7uXxTYg6bybaGTPWSqOcry4rYLgok&m=55t4Slfh9D92-sG3uAkU0FzKLH4_Y8xpFj890YZhOYg&s=4nZgfkupcwNBjct3pw4i3gS_G7d1v54ScRWu7SO29jU&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.
______________________________________________________________________________________

www.accenture.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200821/49e70dc1/attachment.htm>