<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I haven't gotten IdPv3 up and running yet.
<div class=""><br class="">
</div>
<div class="">But really I can't see it being that different to setup than the notes here: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop" class="">https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop</a></div>
<div class=""><br class="">
</div>
<div class="">Most of the configuration in that doco was on the ADFS side - not the Shibboleth side (shibboleth only needed metadata and attribute-release). I believe it's still the same SAML version between IdPv2 and v3 - so that should not cause problems.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 24 Feb 2016, at 12:50 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">
<blockquote type="cite" class="">I order to do this you need to configure a proxy SP in front of your<br class="">
shib IDP and configure your ADFS to trust that proxy SP. I'm not sure<br class="">
if shib v3 supports SAML authentication (i.e has a proxy module) but<br class="">
it should not be impossible.<br class="">
</blockquote>
<br class="">
No, other way around. If they want to use Shibboleth as the IdP and ADFS as the proxy hop, ADFS is just an SP, nothing unusual about it.<br class="">
<br class="">
There is nothing provided here for anybody to go on. If you don't understand the logs, you can ask a specific question, but if your problem is ADFS' lack of logging or debugging, well, you know where Microsoft lives.<br class="">
<br class="">
-- Scott<br class="">
<br class="">
-- <br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a><br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
<span style="font-size: 9.0pt; font-family: 'Calibri'; "><em><strong><br>
Important Notice:</strong> The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete
it and any attachments immediately and advise the sender by return email or telephone.<br>
<br>
Deakin University does not warrant that this email and any attachments are error or virus free.</em></span>
</body>
</html>