<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Andrés,
<div class=""><br class="">
</div>
<div class="">You should only need to configure your servlet container to listen on the non-standard port(e.g. an SSL connector listening on 9443) and your IdP metadata(specifically, the SingleSignOnService endpoints) needs to match. e.g.</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><EntityDescriptor entityID="<a href="https://ndk.shibathome.lalala/idp/shibboleth" class="">https://ndk.shibathome.lalala/idp/shibboleth</a>"></div>
</div>
<div class=""><br class="">
</div>
<div class="">…</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="https://ndk.shibathome.lalala:9443/idp/profile/SAML2/Redirect/SSO" class="">https://ndk.shibathome.lalala:9443/idp/profile/SAML2/Redirect/SSO</a>"/></div>
</div>
<div class=""><br class="">
</div>
<div class="">You’ll also have to watch out for firewalls in the intermediate networks, of course.</div>
<div class=""><br class="">
</div>
<div class="">Hope this helps,</div>
<div class="">Nate.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Apr 25, 2015, at 8:58 AM, Andrés Yacopino <<a href="mailto:ayacopino@gmail.com" class="">ayacopino@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="">
<div class="">
<div class="">
<div class="">
<div class="">Hi, I am new with Shibboleth and SAML, trying to deploy a Shibboleth SAML IDP internally to be integrated with and external Service Provider (SP).<br class="">
</div>
We have a firewall to internet and we are already using port 443 (https) in the firewall redirecting to also port 443 to an internal server.<br class="">
<br class="">
</div>
So only having 1 external Static IP to Internet so I can't use port 443 for Shibboleth.<br class="">
</div>
<br class="">
</div>
I am seeing that in metadata.xml port 8443 and 443 exists.<br class="">
</div>
I have imported SP metadata and send our metadata to SP, but it seems in testing (one url that SP has sent), it is trying to connect to port 443.<br clear="all" class="">
<div class="">
<div class="">
<div class="">
<div class="">
<div class="">
<div class="">
<div class=""><br class="">
<br class="">
The question is, what changes I need to do to make Shibboleth works in non standard port 443?<br class="">
<br class="">
</div>
<div class="">Thanks for the help.<br class="">
<br class="">
</div>
<div class="">-- <br class="">
<div class="gmail_signature">Andrés Yacopino</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
-- <br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>