Setting up proxying to Azure IdP

[Dave Perry]

Dear all

I am having a go at this, as per the following documentation:
https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1467056889/Using+SAML+Proxying+in+the+Shibboleth+IdP+to+connect+with+Azure+AD
(which I know has a warning of 'check what to do with v4.1+', will come back to that)

Having followed all the steps correctly I believe, I found the v4.1 page for part of this:
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1282539600/SAMLAuthnConfiguration

if I use the IdP/conf/authn/authn.properties way of setting the flow and IdP value, I get an error in idp-process.log saying 'bean not set'.
But the IdP does finish loading - albeit hitting a FlowExeception as soon as I try and login to an SP using it.

If I set the bean in global.xml as mentioned as the other way to set this, then restart the shib service:
      <bean id="shibboleth.authn.SAML.discoveryFunction" parent="shibboleth.Functions.Constant"
    target="https://sts.windows.net/idp-with-slash-here/" />

I get the following error in the jetty logs (nothing shows for the boot in idp-process.log):
Caused by: org.xml.sax.SAXParseException: cvc-complex-type.3.2.2: Attribute 'target' is not allowed to appear in element 'bean'.
What am I missing, to see what happens next?


TIA
Dave

_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
email at yorksj.ac.uk<mailto:email at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk>

[cid:df242c09-78dd-47fb-a8c4-00df000ee9c9]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230316/450f9abe/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-w15q4jek.png
Type: image/png
Size: 12155 bytes
Desc: Outlook-w15q4jek.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230316/450f9abe/attachment.png>