<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi all...I'm still struggling with shibboleth not working on my system. Now, I'm just trying to use the samltest site that Nate sent...have uploaded my metadata to samltest, and have copied the samltest metadata to my site. Samltest shows as a provider on my
site...when I login using that, it goes through the process...lets me pick rick, then takes me back to my site, but does not log in rick or create his account. If I look at the session data, it shows all of the attributes correctly...however in my server log
I get an error that the attributes are null. When I try to "fetch" my site metadata, it just spins and never comes back as uploaded. When I manually upload the file, it acts like it was successful, but when I try the test it says my site is not registered.
What am I doing wrong?<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">Deirdre Kirmis
<div>Web Application Developer</div>
<div><span style="color:rgb(34,34,34); font-size:13.3333px; background-color:rgb(255,255,255)">Discovery Services</span></div>
<div><span style="color:rgb(34,34,34); font-size:13.3333px; background-color:rgb(255,255,255)">ASU </span>Library</div>
<div>Arizona State University </div>
<div>480-965-7240</div>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Deirdre Kirmis <Deirdre.Kirmis@asu.edu><br>
<b>Sent:</b> Wednesday, November 27, 2019 4:30 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> RE: configuring shibboleth on AWS using ELB</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:Consolas}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Consolas}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.x_MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Consolas",serif}
p.x_msonormal0, li.x_msonormal0, div.x_msonormal0
{margin-right:0in;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
span.x_HTMLPreformattedChar
{font-family:"Consolas",serif}
span.x_EmailStyle22
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="blue" vlink="purple">
<div class="x_WordSection1">
<p class="x_MsoNormal">That is great! Thank you…it already told me that I’m missing the metadata for identity provider!</p>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal">Deirdre Kirmis</p>
<p class="x_MsoNormal">Technology Services</p>
<p class="x_MsoNormal">Arizona State University Library</p>
<p class="x_MsoNormal">480-965-7240</p>
</div>
<p class="x_MsoNormal"> </p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>Nate Klingenstein<br>
<b>Sent:</b> Wednesday, November 27, 2019 4:26 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> RE: configuring shibboleth on AWS using ELB</p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">Deirdre,</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">You may find
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__samltest.id_&d=DwMFaQ&c=l45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ&r=X1YAM2yWs1HIcWRXyPCSUtCKxhQO748y834uz5ZFnTY&m=-p3_HucMP6fgoiaOsqwQOGvonEwN8AdOsl8FKuiYMeE&s=WLLruzqa9leUxPFfkRtb0oUfHYVehAPdDs_2-golteE&e=">
https://samltest.id/</a> to be a useful resource. It's basically a fully configured SP that will let you see its logs so you can know exactly what's going on, end to end.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">Best wishes,</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">Nate.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">--------</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif; border:solid windowtext 1.0pt; padding:0in"><img border="0" width="100" height="100" id="x__x0000_i1025" alt="Image removed by sender." style="width:1.0416in; height:1.0416in" data-outlook-trace="F:1|T:1" src="cid:~WRD000.jpg"></span><span style="font-size:12.0pt; font-family:"Arial",sans-serif"></span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:13.5pt; font-family:"Arial",sans-serif">The Art of Access</span><span style="font-size:12.0pt; font-family:"Arial",sans-serif">
<strong><span style="font-family:"Arial",sans-serif">®</span></strong></span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<p style="margin:0in; margin-bottom:.0001pt"><strong><span style="font-size:10.0pt; font-family:"Arial",sans-serif">Nate Klingenstein</span></strong><span style="font-size:10.0pt; font-family:"Arial",sans-serif"> | Principal</span><span style="font-size:12.0pt; font-family:"Arial",sans-serif"></span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:10.0pt; font-family:"Arial",sans-serif"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.signet.id_&d=DwMFaQ&c=l45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ&r=X1YAM2yWs1HIcWRXyPCSUtCKxhQO748y834uz5ZFnTY&m=-p3_HucMP6fgoiaOsqwQOGvonEwN8AdOsl8FKuiYMeE&s=TGTv1t1GponuoVksgNyxYaNUwB0-U-468uHc-FilIgw&e=">https://www.signet.id/</a>
</span><span style="font-size:12.0pt; font-family:"Arial",sans-serif"></span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
<blockquote style="border:none; border-left:solid #B0B0B7 1.5pt; padding:0in 0in 0in 4.0pt; margin-left:3.75pt; margin-top:5.0pt; margin-right:0in; margin-bottom:5.0pt">
<p class="x_MsoNormal">-----Original message-----<br>
<strong><span style="font-family:"Calibri",sans-serif">From:</span></strong> Deirdre Kirmis<br>
<strong><span style="font-family:"Calibri",sans-serif">Sent:</span></strong> Wednesday, November 27 2019, 12:14 pm<br>
<strong><span style="font-family:"Calibri",sans-serif">To:</span></strong> Shib Users<br>
<strong><span style="font-family:"Calibri",sans-serif">Subject:</span></strong> RE: configuring shibboleth on AWS using ELB<br>
</p>
<pre>Eventually, we will want to set up as a federation SP, but this is just dev at this point, so we are only configuring our org IDP. </pre>
<pre>I did find the documentation on creating the metadata schema/rules, so thanks for that direction. </pre>
<pre> </pre>
<pre>Deirdre Kirmis</pre>
<pre>Technology Services</pre>
<pre>Arizona State University Library</pre>
<pre>480-965-7240</pre>
<pre> </pre>
<pre>-----Original Message-----</pre>
<pre>From: users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> On Behalf Of Cantor, Scott</pre>
<pre>Sent: Wednesday, November 27, 2019 10:39 AM</pre>
<pre>To: Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>></pre>
<pre>Subject: Re: configuring shibboleth on AWS using ELB</pre>
<pre> </pre>
<pre>On 11/27/19, 12:23 PM, "users on behalf of Deirdre Kirmis" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:Deirdre.Kirmis@asu.edu">Deirdre.Kirmis@asu.edu</a>> wrote:</pre>
<pre> </pre>
<pre>> How do I prepare the metadata myself?</pre>
<pre> </pre>
<pre>It's an XML file with a very defined schema and set of rules for what's in it, but that's probably obvious so the intent of the question is not 100% clear.</pre>
<pre> </pre>
<pre>Speaking in general terms, a federated SP (that is, one dealing with many IdPs of different organizations) really needs to be in a federation, and federations provide metadata management systems generally, though not always.</pre>
<pre> </pre>
<pre>An enterprise SP is dealing with a single IdP and the IdP operator should be providing processes to follow. For myself, I don't ask SPs to give me metadata as a rule, I just expect them to inform me of the keys and hosts through a registration process, then I assign them entityID(s) to use, and I have processes to follow when changes are needed.</pre>
<pre> </pre>
<pre>-- Scott</pre>
<pre> </pre>
<pre> </pre>
<pre>-- </pre>
<pre>For Consortium Member technical support, see <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=l45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ&r=X1YAM2yWs1HIcWRXyPCSUtCKxhQO748y834uz5ZFnTY&m=vG7jnjpCDSN0QFq4AMsIaEJhlm75brYoTFKZaSTj9Dg&s=nmaRAJ-HfEKwZBp3UslR_FH2lQ7avk7fjdY0-PNAGIA&e">https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=l45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ&r=X1YAM2yWs1HIcWRXyPCSUtCKxhQO748y834uz5ZFnTY&m=vG7jnjpCDSN0QFq4AMsIaEJhlm75brYoTFKZaSTj9Dg&s=nmaRAJ-HfEKwZBp3UslR_FH2lQ7avk7fjdY0-PNAGIA&e</a>= </pre>
<pre>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
<pre>-- </pre>
<pre>For Consortium Member technical support, see <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwMFaQ&c=l45AxH-kUV29SRQusp9vYR0n1GycN4_2jInuKy6zbqQ&r=X1YAM2yWs1HIcWRXyPCSUtCKxhQO748y834uz5ZFnTY&m=-p3_HucMP6fgoiaOsqwQOGvonEwN8AdOsl8FKuiYMeE&s=k8dS6UKC2v800qaZG6IlByEGw4QGJlOB7ZLSlCG9I0c&e=">https://wiki.shibboleth.net/confluence/x/coFAAg</a></pre>
<pre>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
</blockquote>
</div>
</div>
</body>
</html>