Shibboleth SP on EC2 ALB setup

[Amit Dongaonkar]

Thanks Keith for those inputs.
I will try this out now.

Thanks and Regards,

*Amit Dongaonkar*

*Director of Technology*

o: (248) 284-4035 m: (248) 385-6033

40850 Grand River Ave #100, Novi, MI 48375

www.nitssolutions.com




On Thu, Mar 10, 2022 at 2:44 PM Wessel, Keith <kwessel at illinois.edu> wrote:

> If your ALB is handling SSL for you, you need to tell Shibboleth to be
> okay with http. You need to set cookieProps to http and handlerSSL to false
> in shibboleth2.xml. You might also need to include the scheme and port in
> the Servername directive in your webserver so that your server constructs
> https URLs even if the server thinks it’s a non-SSL server.
>
>
>
> Keith
>
>
>
>
>
> *From:* users <users-bounces at shibboleth.net> *On Behalf Of *Amit
> Dongaonkar
> *Sent:* Thursday, March 10, 2022 1:23 PM
> *To:* Shib Users <users at shibboleth.net>
> *Subject:* Shibboleth SP on EC2 ALB setup
>
>
>
> Hello group,
>
> Wondering if anyone has set up Shibboleth SP to work on an EC2 instance
> behind an application load balancer (ALB) in AWS.
>
> I am trying to make this setup work but  am not able to. Withe ALB between
> the webserver/SP and the IdP(in our case AWS SSO) the workflow goes into a
> loop where the SP keeps requesting for an assertion and the IdP keeps
> providing one.
>
>
>
> Any help /pointers would be appreciated.
>
>
>
>
>
> Thanks and Regards,
>
>
>
> *Amit Dongaonkar*
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220310/9878ec18/attachment.htm>