EntraID + Shibboleth & Amazon Linux 2023

[Cantor, Scott]

> We’re looking to integrate EntraID utilizing Shibboleth
> running on an Amazon Linux 2023 OS. We’ve been running
> into challenges and are looking to see if this is even
> supported.

The SP works with any SAML IdP.

Entra is not SAML compliant and has a lot of limitations MS likes to mischaracterize as "features somebody has to request and they'll consider adding" but within the constraints of its limitationss, it works with the SP fine.

>  Going through the Shibboleth downloads page
> à Amazon Linux 2023 it directs us to download an EoL
> version, 3.4.1.

That version is not EOL, it's the latest SP version.

>  Reading through documentation we see v4 & v5 referenced 

That's the IdP, not the SP.

> If it is, is there documentation you can point us to?

The SP documentation is the documentation. There isn't anything else, we don't deal in specific products, only our own configuration. It's not our role to document Entra itself. The SP would be like any other generic SAML app you'd integrate.

The caveat with Amazon 2023 is that there was a bug in the packages we built that prevents it from installing the proper systemd unit file for the daemon portion of the SP. We have a fix but I'm waiting on final testing to get the green light to rebuild and publish a new rev.

Should be fairly soon.

Or you can checkout the cpp-linbuild project from our Git and it has the Docker build scripts we use to build the packages now, and you'd get the same output as our official process. The trunk would have the fix I believe. It does not pull in unreleased code, it points to the actual released sources. Output would be the same as what we will eventually publish.

-- Scott