Configure SP using Apache to access ADFS IdP

[Nate Klingenstein]

Arthur,

This should be relatively straightforward integration.  You need to load the ADFS instance's metadata in the SP, ensure that ADFS trusts the SP, tell ADFS to release the proper attributes, ensure the proper attributes are mapped to environment variables by the SP, and since this is a bilateral integration, add ADFS' entityID as the default in the SSO element in shibboleth2.xml.  That last step or the enforcement of protection may be what you're missing in terms of how to redirect the user directly to ADFS when authentication is required.

https://wiki.shibboleth.net/confluence/display/SP3/GettingStarted
https://wiki.shibboleth.net/confluence/display/SP3/ProtectContent

I'm not entirely sure what else to point you to.  I hope this helps.

Best wishes,
Nate.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id

-----Original message-----
From: Goldberg, Arthur P
Sent: Saturday, May 15 2021, 12:27 pm
To: users at shibboleth.net
Subject: Configure SP using Apache to access ADFS IdP

Hello Shibboleth community

I’m a newcomer to Shibboleth, SAML2 and ADFS.

I’m configuring a web app’s Service Provider. The web app runs on CentOS 7.9 and uses Apache 2.4 to handle authentication. Authentication will be provided by an ADFS service, which Mount Sinai operates as
 a cloud-based Azure AD.

I’ve read much of the great 
Shibboleth Service Provider documentation <https://wiki.shibboleth.net/confluence/display/SP3/Home>, but remain confused about how to properly reference the ADFS service as a SAML 2 IdP.

I’d greatly appreciate assistance if you have expertise in this combination of technologies.

Thanks

Arthur

--

Arthur Goldberg, PhD

Research Data Services

Scientific Computing

Associate Professor of Genetics and Genomic Sciences

Institute for Data Science and Genomic Technology

Mount Sinai School of Medicine

Arthur.Goldberg at mssm.edu <mailto:Arthur.Goldberg at mssm.edu>

646 526 5020

Zoom:  https://mssm.zoom.us/my/arthur.goldberg?pwd=LzByMGJOZC9wM3A2aHV6OU94eUtSQT09 <https://mssm.zoom.us/my/arthur.goldberg?pwd=LzByMGJOZC9wM3A2aHV6OU94eUtSQT09>

--

For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net