<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1478917730;
mso-list-type:hybrid;
mso-list-template-ids:373199082 660131218 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:\F06E;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:1675455935;
mso-list-type:hybrid;
mso-list-template-ids:458925880 -371293954 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hello,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We are currently using Shibboleth SP with an Apache web server. Following are the version details<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Apache 2.2<o:p></o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>Shibboleth 2.5<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We have the application set up to work with an IdP and a default Application. The application setup works fine with Shibboleth directing the user to the IdP for the login credentials when a secure resource is accessed. We want to be able to let the user hit a Login page on the SP for certain use cases. So, the following should occur<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>User gets redirected to the IdP login for any of the below links<o:p></o:p></p><p class=MsoListParagraph><a href="https://myhost.com/MyApp">https://myhost.com/MyApp</a><o:p></o:p></p><p class=MsoListParagraph><a href="https://myhost.com/MyApp/xxx">https://myhost.com/MyApp/xxx</a><o:p></o:p></p><p class=MsoListParagraph><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l1 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span><![endif]>User can access the below URL without getting redirected to the IdP <o:p></o:p></p><p class=MsoListParagraph><a href="https://myhost.com/MyApp/Login.html">https://myhost.com/MyApp/Login.html</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Fyi – I have followed the below email which was trying to do the same as us, but this didn’t work for us. We are probably missing something else<o:p></o:p></p><p class=MsoNormal><a href="http://shibboleth.1660669.n2.nabble.com/shibboleth-SP-Problem-PATH-exclusion-td5018479.html">http://shibboleth.1660669.n2.nabble.com/shibboleth-SP-Problem-PATH-exclusion-td5018479.html</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The following are our settings <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>*<b>Apache config</b>*<o:p></o:p></p><p class=MsoNormal><Location /MyApp><o:p></o:p></p><p class=MsoNormal> AuthType shibboleth<o:p></o:p></p><p class=MsoNormal> ShibUseHeaders On<o:p></o:p></p><p class=MsoNormal> ShibRequestSetting requireSession 1<o:p></o:p></p><p class=MsoNormal> require shibboleth<o:p></o:p></p><p class=MsoNormal></Location><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>*<b>The Request Mapper entries in the shibboleth2.xml file are as below</b>*<o:p></o:p></p><p class=MsoNormal> <RequestMapper type="Native"><o:p></o:p></p><p class=MsoNormal> <RequestMap applicationId="default"><o:p></o:p></p><p class=MsoNormal> <Host name="myhost.com" scheme="https" ><o:p></o:p></p><p class=MsoNormal> <Path name="MyApp" authType="shibboleth" requireSession="true"><o:p></o:p></p><p class=MsoNormal> <Path name="Login.html" authType="shibboleth" requireSession="false" /><o:p></o:p></p><p class=MsoNormal> </Path><o:p></o:p></p><p class=MsoNormal> </Host><o:p></o:p></p><p class=MsoNormal> </RequestMap><o:p></o:p></p><p class=MsoNormal> </RequestMapper><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>*<b>The following are logs from shibd_native.log</b>*<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : loaded XML resource (/etc/shibboleth/shibboleth2.xml)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : Shibboleth SP Version 2.5.0<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : Library versions: log4shib 1.0.5, Xerces-C 3.1.1, XMLTooling-C 1.5.1, Shibboleth 1.5.0<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : building ListenerService of type UnixListener...<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : no SessionCache specified, using StorageService-backed instance<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Config : building RequestMapper of type Native...<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring SSO initiation for protocol (SAML2)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SessionInitiator of type (SAML2) to chain (/Login)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring ArtifactResolution endpoints for protocol (SAML2)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding ArtifactResolutionService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:SOAP) at (/Artifact/SOAP)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring SSO endpoints for protocol (SAML2)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST) at (/SAML2/POST)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign) at (/SAML2/POST-SimpleSign)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact) at (/SAML2/Artifact)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:PAOS) at (/SAML2/ECP)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring SSO initiation for protocol (SAML1)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SessionInitiator of type (Shib1) to chain (/Login)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring SSO endpoints for protocol (SAML1)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:1.0:profiles:browser-post) at (/SAML/POST)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:1.0:profiles:artifact-01) at (/SAML/Artifact)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring Logout initiation for protocol (SAML2)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding LogoutInitiator of type (SAML2) to chain (/Logout)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring Logout endpoints for protocol (SAML2)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SingleLogoutService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:SOAP) at (/SLO/SOAP)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SingleLogoutService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect) at (/SLO/Redirect)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SingleLogoutService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST) at (/SLO/POST)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding SingleLogoutService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact) at (/SLO/Artifact)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : auto-configuring Logout initiation for protocol (Local)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 INFO Shibboleth.Application : adding LogoutInitiator of type (Local) to chain (/Logout)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : no resource uri/path/name supplied, will load inline configuration<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : loading inline configuration...<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : added Path mapping (login.html)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : added Path mapping (MyApp)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : Added <Host> mapping for <a href="https://myhost.com">https://myhost.com</a> <o:p></o:p></p><p class=MsoNormal>2012-10-29 15:16:23 DEBUG Shibboleth.RequestMapper : Added <Host> mapping for <a href="https://myhost.com:443">https://myhost.com:443</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Apache [11987] shib_check_user: mapped https://myhost.com/MyApp/Login.html to default<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: sending message (default::getHeaders::Application)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: trying to connect to listener<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: socket (22) connected successfully<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.SessionInitiator.SAML2 [11987] shib_check_user: attempting to initiate session using SAML 2.0 with provider (https://myidp.com/idp/shibboleth)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: sending message (default/Login::run::SAML2SI)<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:12 DEBUG Shibboleth.Listener [11987] shib_check_user: send completed, reading response message<o:p></o:p></p><p class=MsoNormal>2012-10-29 15:19:13 DEBUG Shibboleth.Config : using local resource (/etc/shibboleth/shibboleth2.xml), will monitor for changes<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Could someone point out what if I am missing anything?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks<o:p></o:p></p><p class=MsoNormal>Ragadeep<o:p></o:p></p></div></body></html>