Ex: Newbie question - how to test a new shibboleth installation

[Paul B. Henson]

On Thu, Aug 10, 2023 at 08:02:18PM -0700, David Dellinger via users wrote:

> I am setting up Shibboleth for the first time, and am not sure how to
> test it prior to trying to connect it to InCommon, our first use for
[...]
> When I look at /idp/status page, it just displays a page with a missing image and this text:

Access control to the status page and other internal functionality is
controlled in the conf/admin/admin.properties file, and defaults to
AccessByIPAddress, which defaults to only localhost connections allowed.
To display the status page with the default config, you will need to
have your request originate from the system running the idp, or update
admin.properties to use a different authz mechanism (as defined in
conf/access-control.xml) or update AccessByIPAddress (also defined in
conf/access-control.xml) to allow other source IP addresses.

To do some minimal testing without involving an actual SP, you can use
the HelloWorld admin function:

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1289683553/HelloWorldConfiguration

This defaults to AccessByAdminUser in admin.properties, which is not
defined by default, although there is an example commented out in
access-control.xml.

To fully test a round trip authentication, you can use samltest:

	https://samltest.id/

You will need to upload your idp metadata, and add the samltest SP metadata
to your sp, at which point you can use the "Test Your IDP" link to
authenticate against your idp and display returned attributes.

This does assume you have configured an authentication and attribute
backend.

There is considerable documentation available at:

	https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631501/DeployerResources

including a fairly step by step list of initial configuration
requirements at:

	https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631515/Configuration


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768