<!DOCTYPE HTML><html>
<head>
<meta name="Generator" content="Amazon WorkMail v3.0-4530">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>RE: configuring shibboleth on AWS using ELB</title>
</head>
<body>
<p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">Deirdre,</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;"> </p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">Yes, it will work fine. If you're using Apache, you need to virtualize the virtual host with the right directives, generally ServerName loadbalancer.asu.edu:443, so that it "thinks" it's the load balancer AND your metadata needs to reflect this. You can do the same with the Site directive in IIS. Many SP's are deployed like this.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">By virtualization, essentially, the web server needs to "think" it's the load balancer when examining inbound messages and generating outbound requests. That's all.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Take care,</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Nate.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">--------</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"><img src="https://www.signet.id/wp-content/uploads/2019/08/signature-e1566142203123.png" /></p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"><font size="4">The Art of Access</font> <strong>®</strong></p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"><font size="2"><strong>Nate Klingenstein</strong> | Principal</font></p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"><font size="2"><a href="https://www.signet.id/">https://www.signet.id/</a> </font></p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><blockquote style="border-left:2px solid #b0b0b7; margin-left:5px; margin-right:0px; padding-left:5px">-----Original message-----<br /><strong>From:</strong> Deirdre Kirmis<br /><strong>Sent:</strong> Tuesday, December 3 2019, 6:26 am<br /><strong>To:</strong> Nate Klingenstein; Shib Users<br /><strong>Subject:</strong> Re: configuring shibboleth on AWS using ELB<br /><br /><!-- begin sanitized html --><style type="text/css">P {margin-top:0;margin-bottom:0;}</style><div class="bodyclass"><div style="color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">Nate, thank you so much for your response. Yes, my instance is behind a load-balancer, but I have a DNS entry pointing to the ELB AWS domain, which is what I am using for my SP address. What do you mean by "Get the virtualization on your instance to match ELB"? Will I be able to make this work?</div><div style="color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">Thank you!</div><div style="color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"> </div><div id="Signature"><div id="divtagdefaultwrapper" dir="ltr" style="color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><div style="font-family:Tahoma; font-size:13px"><div style="font-family:Tahoma; font-size:13px"><div style="font-family:Tahoma; font-size:13px">Deirdre Kirmis<div>Web Application Developer</div><div><span style="background-color:#ffffff; color:#222222; font-size:13.3333px">Discovery Services</span></div><div><span style="background-color:#ffffff; color:#222222; font-size:13.3333px">ASU </span>Library</div><div>Arizona State University </div><div>480-965-7240</div></div></div></div></div></div><div id="appendonsend"> </div><hr style="width:98%" /><div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif"><strong>From:</strong> users <users-bounces@shibboleth.net> on behalf of Nate Klingenstein <ndk@signet.id><br /><strong>Sent:</strong> Tuesday, December 3, 2019 2:11 AM<br /><strong>To:</strong> Shib Users <users@shibboleth.net><br /><strong>Subject:</strong> RE: configuring shibboleth on AWS using ELB</font><div> </div></div><div><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Deirdre,</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">> however in my server log I get an error that the attributes are null. When I try to "fetch" my site metadata, it just spins and never comes back as uploaded. When I manually upload the file, it acts like it was successful, but when I try the test it says my site is not registered. What am I doing wrong?</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Sorry, in my haste, I missed this part of your message. It's most likely that your site is behind a load balancer(obviously) and SAMLtest can't issue queries directly to individual nodes behind a load balancer. Even if it could, it would receive the wrong answer. Alternative possibilities exist, but this one looks pretty clear. Get the virtualization on your instance to match ELB and then type in ELB as your IdP address.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">You'd eventually have to do this with any IdP, so this is far from a fruitless exercise.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Take care,</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Nate.</p><blockquote style="border-left:2px solid #b0b0b7; margin-left:5px; margin-right:0px; padding-left:5px"> </blockquote></div></div> <!-- end sanitized html --></blockquote>
</body>
</html>