<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"><div class="WordSection1"><p class="MsoNormal">Hello everyone,</p><p class="MsoNormal"> </p><p class="MsoNormal">I have an old intranet site I am attempting to protect with Shibboleth SP. This site old and is not designed to integrate with SAML in any way. My plan was to have an SP initiated SSO, so that when a user goes to <a href="http://intranet.com">intranet.com</a>, they would get stopped by Shibboleth SP and my IdP, go through authentication, then they may proceed to access the site. </p><p class="MsoNormal"> </p><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">I have tried this with and without reverse proxies but I cant seem to get anything other than “<span style="color:black">A valid session was not found.” I have also tried using a SAML tracker but that shows that the intranet site and shibboleth arnt even attempting to communicate. I have the following snippet (scrubbed for identifying information) as my shibboleth2.xml<br><br><InProcess logger="native.logger"></span></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <ISAPI normalizeRequest="true" safeHeaderNames="true"></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <Site id="2" name="<a href="http://shib-sp.domain.com">shib-sp.domain.com</a>" scheme="https" port="443"/></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </ISAPI></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </InProcess><br><br> <RequestMapper type="Native"></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <RequestMap applicationId="default"></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <Host name="<a href="http://intranet.domain.com:1234">intranet.domain.com:1234</a>"></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <Path name="secure" authType="shibboleth" requireSession="true"/></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </Host></span></pre><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </RequestMap></span></pre><p><span style="color:black"> </RequestMapper><br><br>For reverse proxies, I have tried the guide found at: <a href="https://doit.missouri.edu/wp-content/uploads/2014/09/WindowsGuide.pdf">https://doit.missouri.edu/wp-content/uploads/2014/09/WindowsGuide.pdf</a> , page 22-30<br><br>Or I will get something along this:<br><br></span>opensaml::BindingException at (<a href="https://shib-sp.domain.com/Shibboleth.sso/SAML2/POST">https://shib-sp.domain.com/Shibboleth.sso/SAML2/POST</a>)</p><p>Invalid HTTP method (GET).<br><br>I would appreciate any help or direction,<br><br>Thanks.</p><pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span></pre></div></body></html>