<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Since modern SAML is usually a front-channel protocol (that is, all communications between the IdP and the SP happen through browser redirects as opposed to server-to-server requests), if your browser isn't being redirected to your IdP after clicking the sign-in
button, the issue lies with your AWS configuration. This list is dedicated to providing best-effort community support for the Shibboleth software components, so if the issue is on the AWS side, your best bet would be to work through their documentation and
support channels.<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
You can confirm this by using your browser of choice's developer tools to see what HTTP requests are being issued.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
If you *are* being redirected to your IdP successfully, but aren't seeing a login screen, then this is the right place, though once again, support on-list is entirely volunteer based and best-effort.<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Em<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of leosimon <leosimon@digital-nirvana.com><br>
<b>Sent:</b> Friday, April 24, 2020 1:25 PM<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Subject:</b> Re: [External] ShibV4-LdapCognito Issue</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Thank you for the reply.<br>
<br>
I have uploaded the IDP metadata on the AWS Cognito config. The URL I<br>
mentioned is, once the authentication with LDAP passes then it will redirect<br>
to <a href="https://google.com(it">https://google.com(it</a> can be anything).<br>
<br>
It works in this way,<br>
I have to access the cognito URL which will be in the format,<br>
<br>
<a href="https://xxxxxxxx.auth.us-east-1.amazoncognito.com/login?response_type=token&client_id=xxxxxxxxxxx&redirect_uri=https://google.com">https://xxxxxxxx.auth.us-east-1.amazoncognito.com/login?response_type=token&client_id=xxxxxxxxxxx&redirect_uri=https://google.com</a><br>
--This will show a signin button and once we click on that, It takes us to<br>
the IDP's server URL<br>
'<a href="https://example.com/idp/profile/SAML2/Redirect/SSO?execution=e1s1">https://example.com/idp/profile/SAML2/Redirect/SSO?execution=e1s1</a>' with a<br>
prompt for LDAP authentication. <br>
<br>
*This step is not happening in V3.4.6 and V4*<br>
<br>
With the same procedure, I got it working with Shib version 2.4.1 and 3.2.1.<br>
The issue I have mentioned is happening only from 3.4.6 version and 4 as<br>
well. I cannot find clearly from the documentation to change what and where<br>
to make this work. It looks very complex to me.<br>
<br>
<br>
<br>
<br>
--<br>
Sent from: <a href="https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">
https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html</a><br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>