Additional Entity in IIS

Matthews, Lee (NIH/NIDDK) [E] lee.matthews at nih.gov
Mon Dec 19 21:45:23 UTC 2022


Thanks for the response.

I am using phpinfo.php to just view the PHP Variables to see which Shib-Handler is being used in the respective folder.

It seems like only  https://fqdn/Shibboleth.sso is being used.
I have handlerURL="/esig/Shibboleth.sso" in my ApplicationOverride.


The handlerURL seems to be the difference with Apache vs. IIS and being prompted for re-authentication.

I cannot get /esig/Shibboleth.sso/Metadata to generate a file without changing the applicationId of requestmap.





________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, December 19, 2022 3:57 PM
To: Matthews, Lee (NIH/NIDDK) [E] <lee.matthews at nih.gov>; Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] Re: Additional Entity in IIS

> If the first host in the requestmap has the second entity(esig) listed in the
> applicationId the Shib-Handler in /esig/phpinfo. php changes to
> /esig/Shibboleth. sso.

The handler base path (virtually) always ends in /Shibboleth.sso.

A typical path override will look something like:

<RequestMap applicationId="default">
        <Host ...>
                <Path name="esig" applicationId="override" />
        </Host>
</RequestMap>

The ApplicationOverride's Sessions element later on will contain handlerURL="/esig/Shibboleth.sso"

A handler of "/esig/phpinfo.php" is pretty well off the reservation and presumably misunderstands what the handler is for.

-- Scott


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and are confident the content is safe.

T
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20221219/b80ac7e1/attachment.htm>


More information about the users mailing list