Shib v4 hybrid proxying via Azure AD

Tony Skalski ajs at stolaf.edu
Mon Mar 1 22:20:08 UTC 2021


>Anybody doing this should read the excellent page that Chris Phillips and
the Canadian Access Federation added to the Shib wiki about doing this

Yes, kudos, to the authors. That was my guiding document setting up similar
against Google.

On Mon, Mar 1, 2021 at 3:49 PM Michael Grady <mgrady at unicon.net> wrote:

>
>
> On Mar 1, 2021, at 2:54 PM, Jeffrey Williams via users <
> users at shibboleth.net> wrote:
>
> I have this running in our val environment and ran into that error in the
> past.  For us, it was having to do with Shib not being configured to parse
> the returned attribute to be used to poll your attribute source.
>
> For starters, confirm that you have the c14n/attribute bean uncommented in
> conf/c14n/subject-c14n.xml.  I don't think that's expressly given in the
> docs.
>
> -Jeff
>
> On Mon, Mar 1, 2021 at 2:33 PM Goggins, Patrick via users <
> users at shibboleth.net> wrote:
>
>> Building up a new Shib v4.0.1 IdP (under WS2019) utilizing Azure AD for a
>> hybrid release.
>>
>> Finished running through the documentation steps a few days ago but
>> running into some issues with crosswalk mapping. I’ve enabled SAML
>> debugging to isolate the issue but not sure where the adjustment needs to
>> be made.
>>
>
> Anybody doing this should read the excellent page that Chris Phillips and
> the Canadian Access Federation added to the Shib wiki about doing this:
>
>
> https://wiki.shibboleth.net/confluence/display/KB/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD
>
> I was going to write up a page, but they pointed me to the work they had
> in progress,  and it really covers everything you need to know and be aware
> of when doing this.
>
> --
> Michael A. Grady
> IAM Architect, Unicon, Inc.
>
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
*Tony Skalski*
System Administrator | IT

*Office: *507-786-3227 <(507)786-3227>
1510 St. Olaf Avenue Northfield, MN 55057
stolaf.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210301/47b852fe/attachment.htm>


More information about the users mailing list