IdP integrating with VMWare Horizon as an SP?

[Baron Fujimoto]

Has anyone had success integrating the Shib IdP (v4) with VMWare Horizon as
an SP? I don't think this is actually an IdP issue, since AFAICT, we
receive their SAML AuthnRequest and subsequently issue an expected
Response... but they appear to be unable to get their backend plumbed
correctly to get their SSO working. Hopefully someone may have some
insight though.

They are working with consultants on the SP side of things, and they
apparently have experience and documentation for working with Okta, Azure,
and Ping(?), but not Shibboleth's IdP specifically. I am basically a 3rd
party observer as far as configuring their SP goes. What we have seen is
when they try to import our metadata, they get some "Invalid static
metadata" error, but unfortunately nothing more specific than that. Our
metadata has worked so far with all other SPs we've integrated with,
including InCommon, etc. Of course, they demonstrate to us that if they
import some other metadata sample, no such error. I'm just putting this out
there in case anyone else has been successful here, and maybe we can glean
something from their experience.
-- 
Baron Fujimoto <baron at hawaii.edu> ::: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum descendus pantorum
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230110/d351a8a1/attachment.htm>