Connecting Shibboleth based SP to Azure-Entra as IDP

[Bhagwat, Shrikant]

Hi

I am trying to connect shibboleth SP to Entra/Azure as IDP

Seeing error below in shibd.log after starting shibboleth service.


2025-01-31 20:02:58 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (/etc/shibboleth/POC-AZ-IDP-SigningCert.cer)
2025-01-31 20:02:58 ERROR OpenSSL : error code: 33558541 in crypto/bio/bss_file.c, line 288
2025-01-31 20:02:58 ERROR OpenSSL : error data: fopen('/etc/shibboleth/POC-AZ-IDP-SigningCert.cer','r')
2025-01-31 20:02:58 ERROR OpenSSL : error code: 537346050 in crypto/bio/bss_file.c, line 290
2025-01-31 20:02:58 ERROR XMLTooling.CredentialResolver.Chaining : caught exception processing embedded CredentialResolver element: Unable to load certificate(s) from file (/etc/shibboleth/POC-AZ-IDP-SigningCert.cer).
2025-01-31 20:02:58 INFO OpenSAML.MetadataProvider.XML : no resource url/path supplied, assuming inline configuration
2025-01-31 20:02:58 DEBUG OpenSAML.MetadataProv


Below is element in shibboleth2.xml file

<MetadataProvider type="XML" file="POC-Az-IDPMetadata.xml" reloadInterval="7200">

        <MetadataFilter type="Signature">
                <CredentialResolver type="Chaining">
                        <CredentialResolver type="File" certificate="POC-AZ-IDP-SigningCert.cer"/>

                </CredentialResolver>
        </MetadataFilter>

         </MetadataProvider>

Regards

Shrikant
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250201/5ab7780a/attachment.htm>