<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>I’ve got Shib SP 2.4.3 in a Azure (Platform as a service web role) 2008-R2<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The isapi filter loads but doesn’t seem to work correctly<span style='color:#1F497D'>,</span> and doesn’t grab .sso URLs (so Shibboleth.sso/SAML2/POST and Shibboleth.sso/Status fail with a IIS 404.) although when I went to /secure it intercepted the request and set it to the IdP so I think did have the right siteID configured in Shibboleth2.xml<span style='color:#1F497D'>.</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As the IIS compatibility mode isn’t installed I’ve manually added the .sso script mapping, loaded the isapi filter and adjusted the file permissions to ensure IIS can write log files and access /opt.<o:p></o:p></p><p class=MsoNormal>Shibd is running and seems happy.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Has anyone got Shibboleth SP installed in Azure successfully?<o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Regards<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Paul<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>Example of debug logs when it fails<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:18:18 DEBUG Shibboleth.ISAPI [880] isapi_shib: mapped <a href="https://AzureSPname.net/secure/">https://AzureSPname.net/secure/</a> to default<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:18:18 DEBUG Shibboleth.SessionInitiator.SAML2 [880] isapi_shib: attempting to initiate session using SAML 2.0 with provider (<a href="https://IDPname.net/idp/shibboleth">https://IDPname.net/idp/shibboleth</a>)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:18:18 DEBUG Shibboleth.Listener [880] isapi_shib: sending message (default/Login::run::SAML2SI)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:18:18 DEBUG Shibboleth.Listener [880] isapi_shib: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:18:30 DEBUG Shibboleth.ISAPI [880] isapi_shib: mapped <a href="https://AzureSPname.net/Shibboleth.sso/SAML2/POST">https://AzureSPname.net/Shibboleth.sso/SAML2/POST</a> to default<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Example of debug logs for same SP version installed on a vanilla Windows 2008 R2 server where it works correctly.<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.ISAPI [2124] isapi_shib: mapped <a href="https://NormallSPname.net/secure/">https://NormallSPname.net/secure/</a> to default<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: sending message (default::getHeaders::Application)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: trying to connect to listener<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: socket (652) connected successfully<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.SessionInitiator.SAML2 [2124] isapi_shib: attempting to initiate session using SAML 2.0 with provider (<a href="https://IDPname.net/idp/shibboleth">https://IDPname.net/idp/shibboleth</a>)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: sending message (default/Login::run::SAML2SI)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:12 DEBUG Shibboleth.Listener [2124] isapi_shib: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:14 DEBUG Shibboleth.ISAPI [2124] isapi_shib: mapped <a href="https://NormallSPname.net/secure/">https://NormallSPname.net/secure/</a> to default<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:14 DEBUG Shibboleth.SessionInitiator.SAML2 [2124] isapi_shib: attempting to initiate session using SAML 2.0 with provider (<a href="https://IDPname.net/idp/shibboleth">https://IDPname.net/idp/shibboleth</a>)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:14 DEBUG Shibboleth.Listener [2124] isapi_shib: sending message (default/Login::run::SAML2SI)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:14 DEBUG Shibboleth.Listener [2124] isapi_shib: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:15 DEBUG Shibboleth.ISAPI [2124] isapi_shib: mapped <a href="https://NormallSPname.net/Shibboleth.sso/SAML2/POST">https://NormallSPname.net/Shibboleth.sso/SAML2/POST</a> to default<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:15 DEBUG Shibboleth.ISAPI [2124] isapi_shib_extension: mapped <a href="https://NormallSPname.net/Shibboleth.sso/SAML2/POST">https://NormallSPname.net/Shibboleth.sso/SAML2/POST</a> to default<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:15 DEBUG Shibboleth.Listener [2124] isapi_shib_extension: sending message (default/SAML2/POST)<o:p></o:p></p><p class=MsoNormal>2012-06-22 15:28:15 DEBUG Shibboleth.Listener [2124] isapi_shib_extension: send completed, reading response message<span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>…</span><o:p></o:p></p></div><p style="font-size: 6px; font-family: Verdana, Arial, sans-serif">_________________________________________________________________________________________________________________________________________</p>
<table width="550" border="0" cellspacing="0" cellpadding="0" style="margin-top:12px; margin-bottom:0px">
<tr><td width="127">
<a href="http://www.RMbookshelf.com/?utm_campaign=fy12-emailsignoff&utm_medium=email_signoff&utm_source=cross-sector&utm_content=rmbooks"><img src="http://www.rm.com/_rmvirtual/media/images/RM-Books-email_signoff.png" width="119" height="126" style="margin-right:8px" alt="RM Books" border=0/></a></td>
<td width="423" valign="middle"><p style="font-size: 12px; font-family: Verdana, Arial, sans-serif"><br />RM Books - the first ever ebook system designed specifically for schools. Pre-register for free at <a href="http://www.RMbookshelf.com/?utm_campaign=fy12-emailsignoff&utm_medium=email_signoff&utm_source=cross-sector&utm_content=rmbooks" style="color:#000000; text-decoration:underline;"><strong>www.RMbookshelf.com</strong></span></a></p></p></td></tr></table>
<p style="font-size: 6px; font-family: Verdana, Arial, sans-serif">_________________________________________________________________________________________________________________________________________</p>
<p style="font-size: 12px; font-family: Verdana, Arial, sans-serif; color:#006600; margin-bottom:15px;">P.S. Think Green - don't print this email unless you really need to.</p><table border="0" cellspacing="0" cellpadding="0" width="550">
<tr>
<td width="144" valign="top"><p><img width="127" height="107" src="http://www.rm.com/_RMVirtual/media/images/rm_education_email_signature_logo.gif" /></p></td>
<td width="457" valign="top"><p><font face="Verdana" size="2" color="#999999">This message is confidential. You should not copy it or disclose its contents to anyone. You may use and apply the information only for the intended purpose. Internet communications are not secure and therefore RM Education does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of RM Education. If this email has come to you in error please delete it and any attachments. Please note that RM Education may intercept incoming and outgoing email communications. <br />
<br />
RM Education plc is a company registered in England and Wales, Company Reg. No: 01148594; Registered Office: New Mill House, 183 Milton Park, Abingdon, OXON OX14 4SE; VAT No: 630 8236 56 </p></td>
</tr>
</table></body></html>