Shibboleth SP on EC2 ALB setup

[Wessel, Keith]

If your ALB is handling SSL for you, you need to tell Shibboleth to be okay with http. You need to set cookieProps to http and handlerSSL to false in shibboleth2.xml. You might also need to include the scheme and port in the Servername directive in your webserver so that your server constructs https URLs even if the server thinks it’s a non-SSL server.

Keith


From: users <users-bounces at shibboleth.net> On Behalf Of Amit Dongaonkar
Sent: Thursday, March 10, 2022 1:23 PM
To: Shib Users <users at shibboleth.net>
Subject: Shibboleth SP on EC2 ALB setup

Hello group,
Wondering if anyone has set up Shibboleth SP to work on an EC2 instance behind an application load balancer (ALB) in AWS.
I am trying to make this setup work but  am not able to. Withe ALB between the webserver/SP and the IdP(in our case AWS SSO) the workflow goes into a loop where the SP keeps requesting for an assertion and the IdP keeps providing one.

Any help /pointers would be appreciated.


Thanks and Regards,


Amit Dongaonkar


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220310/724073eb/attachment.htm>