I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS as IdP using Shibboleth as SP. For that reason I set up a Ubuntu VM with Apache and Shibboleth and a Windows Server VM with ADFS.
If I understand correctly, I need to add Shibboleth as a relying party trust to ADFS. In order to do that, I need metadata generated by Shibboleth at
https://shibboleth/Shibboleth.sso/Metadata. However, this doesn't work as Shibboleth tries to get Metadata from ADFS as specified in the
<SSO> tag (
https://winserver.testdomain.com/adfs/services/trust). Everything below
adfs/services returns an HTTP 503 error. None of the solutions recommended elsewhere seem to fix that (restarting IIS, fiddling with certificates). I also can't find any logfile which protocols the 503 error.
What am I doing wrong? Probably, I'm just not grasping the concept correctly...