Hi,

i have a unique situation and struggling to resolve this issue
sp 3.0.3 on windows 2016, iis 10.

this is my shibboleth2.xml
 <InProcess logger="native.logger">
        <ISAPI normalizeRequest="true" safeHeaderNames="true">
           <Site id="1" name="www.example.us" scheme="https" >
                <Alias>gateway.amazon.us</Alias>
        </Site>
        </ISAPI>
    </InProcess>
    <RequestMapper type="Native">
        <RequestMap applicationId="default">
        <Host name="gateway.amazon.us" >
                <Path name="MYAPP.Internal.Web" authType="shibboleth" requireSession="true" />  
            </Host>
        <Host name="www.example.us" > 
                <Path name="MYAPP.Internal.Web" authType="shibboleth" requireSession="true" /> 
    </Host>
        </RequestMap>
    </RequestMapper>
 <ApplicationDefaults entityID="https://www.example.us/"
                           REMOTE_USER="MYAPPKey eppn persistent-id targeted-id" signing="false" encryption="false">
        <Sessions lifetime="7200" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="true" cookieProps="https" handlerURL="/MYAPP/Shibboleth.sso" >
           <SSO entityID="https://idp.microsoft.azure.us/idp/shibboleth"
  > SAML2 </SSO>  

            <!-- SAML and local-only logout. -->
            <Logout>SAML2 Local</Logout>

            <!-- Extension service that generates "approximate" metadata based on SP configuration. -->
            <Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>

            <!-- Status reporting service. -->
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1 "/>

            <!-- Session diagnostic service. -->
            <Handler type="Session" Location="/Session" showAttributeValues="true"/>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

         </Sessions>   

my issue is

i was able to get my website working until i was asked to used the gateway "gateway.amazon.us"
the gateway is a proxy in front of the iis web server.


the assertion url should be (got this with saml tracer)
 AssertionConsumerServiceURL="https://gateway.amazon.us/MYAPP.Internal.Web/Shibboleth.sso/SAML2/POST"
Destination="https://idp.microsoft.azure.us/idp/profile/SAML2/Redirect/SSO"

 but i am getting
AssertionConsumerServiceURL="https://www.example.us/MYAPP.Internal.Web/Shibboleth.sso/SAML2/POST"
Destination="https://idp.microsoft.azure.us/idp/profile/SAML2/Redirect/SSO"



can you please help me get the right configuration? thanks






        
        
        
<br/><hr align="left" width="300" />
Sent from the <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth - Users mailing list archive</a> at Nabble.com.<br/>