Shibboleth SP not protecting site its set for

[Jesse Nunez - NOAA Affiliate]

Hello everyone,



I have an old intranet site I am attempting to protect with Shibboleth SP.
This site old and is not designed to integrate with SAML in any way. My
plan was to have an SP initiated SSO, so that when a user goes to
intranet.com, they would get stopped by Shibboleth SP and my IdP, go
through authentication, then they may proceed to access the site.



I have tried this with and without reverse proxies but I cant seem to
get anything other than “A valid session was not found.” I have also
tried using a SAML tracker but that shows that the intranet site and
shibboleth arnt even attempting to communicate. I have the following
snippet (scrubbed for identifying information) as my shibboleth2.xml

<InProcess logger="native.logger">

        <ISAPI normalizeRequest="true" safeHeaderNames="true">

            <Site id="2" name="shib-sp.domain.com" scheme="https" port="443"/>

        </ISAPI>

    </InProcess>

    <RequestMapper type="Native">

        <RequestMap applicationId="default">

            <Host name="intranet.domain.com:1234">

                <Path name="secure"  authType="shibboleth"
requireSession="true"/>

            </Host>

        </RequestMap>

    </RequestMapper>

For reverse proxies, I have tried the guide found at:
https://doit.missouri.edu/wp-content/uploads/2014/09/WindowsGuide.pdf ,
page 22-30

Or I will get something along this:

opensaml::BindingException at (
https://shib-sp.domain.com/Shibboleth.sso/SAML2/POST)

Invalid HTTP method (GET).

I would appreciate any help or direction,

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240620/4c50f934/attachment.htm>