<div dir="ltr"><div class="gmail_default" style="font-family:garamond,serif">Thanks Keith for those inputs.</div><div class="gmail_default" style="font-family:garamond,serif">I will try this out now.</div><div class="gmail_default" style="font-family:garamond,serif"><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><font face="garamond, serif">Thanks and Regards,</font></div><div><font face="garamond, serif"><br></font></div><div><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-size:12pt">Amit Dongaonkar</span></b></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><i><span style="font-size:12pt">Director of Technology</span></i></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">o: <font color="#000000">(248) 284-4035</font> m: <font color="#000000">(248) 385-6033</font></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">40850 Grand River Ave #100, Novi, MI 48375</p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><span style="color:rgb(17,85,204)"><a href="http://www.nitssolutions.com/" style="color:rgb(17,85,204)" target="_blank">www.nitssolutions.com</a></span></p><p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><img src="https://docs.google.com/uc?export=download&id=1i0JVIr2ggItA2I7vMW9bJxH4WADSjUYD&revid=0ByYQ4lToCQJJM2czUk5qNHR6RVlFRFJQcjRaVG4rZmgzRHFFPQ"><br></p></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 10, 2022 at 2:44 PM Wessel, Keith <<a href="mailto:kwessel@illinois.edu">kwessel@illinois.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="gmail-m_-7436243010415073549WordSection1">
<p class="MsoNormal">If your ALB is handling SSL for you, you need to tell Shibboleth to be okay with http. You need to set cookieProps to http and handlerSSL to false in shibboleth2.xml. You might also need to include the scheme and port in the Servername
 directive in your webserver so that your server constructs https URLs even if the server thinks it’s a non-SSL server.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Keith<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b>From:</b> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> <b>On Behalf Of
</b>Amit Dongaonkar<br>
<b>Sent:</b> Thursday, March 10, 2022 1:23 PM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject:</b> Shibboleth SP on EC2 ALB setup<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif">Hello group,<br clear="all">
<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif">Wondering if anyone has set up Shibboleth SP to work on an EC2 instance behind an application load balancer (ALB) in AWS.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif">I am trying to make this setup work but  am not able to. Withe ALB between the webserver/SP and the IdP(in our case AWS SSO) the workflow goes into a loop where the SP keeps requesting for an assertion
 and the IdP keeps providing one.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif">Any help /pointers would be appreciated.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Garamond,serif">Thanks and Regards,<u></u><u></u></span></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p style="background-image:initial;background-position:initial;background-repeat:initial">
<b><span style="font-size:12pt">Amit Dongaonkar</span></b><span style="font-size:9.5pt"><u></u><u></u></span></p>
<p style="background-image:initial;background-position:initial;background-repeat:initial">
<span style="font-size:9.5pt"><u></u> <u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>

-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>