<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Lalith,</p>
<p><br>
</p>
<p>The only consistent way to know which IP address is being used to communicate with your IdP is to check your web server's access logs to see which IP address it thinks your queries are coming in from. That IP will work if you configure it in.</p>
<p><br>
</p>
<p>Take care,</p>
<p>Nate.<br>
</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Lalith Jayaweera <ljayaweera@gmail.com><br>
<b>Sent:</b> Thursday, July 27, 2017 4:53:20 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Enable IdP Status in IdP 3.3.x</font>
<div> </div>
</div>
<div>
<div dir="ltr">I wanted to enable idp status (https://<idphost>/idp/status) for a specific IP
<div><br>
</div>
<div>I modified access-control.xml and added</div>
<div><br>
</div>
<div>
<div> <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"</div>
<div> p:allowedRanges="#{ {'xxx.xxx.x.xxx/32', '::1/128'} }" /></div>
</div>
<div><br>
</div>
<div>also in idp.properties I got below</div>
<div><br>
</div>
<div>
<div>idp.status.accessPolicy= AccessByIPAddress</div>
<div>idp.resolvertest.accessPolicy= AccessByIPAddress</div>
<div>idp.reload.accessPolicy= AccessByIPAddress</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>but when I try https://<idphost>/idp/status it gives access denied error,</div>
<div><br>
</div>
<div>Do I have to configure anything else? basically need is how to enable the status (previous https://<idphost>/idp/profile/Status) in IdP 3.3.x for a specific IP</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</body>
</html>