Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [shibboleth]

Open Source identity authorization and management solution, providing Single Sign On (SSO)

0
votes
2answers
735 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to https:/...
0
votes
2answers
832 views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
0
votes
2answers
275 views

Shibboleth SP, IIS

I have a Shibboleth SP instance on Server 2008 R2 and everything is authenticating fine with the IdP. I was testing protecting a single page and that is working fine by doing the following in the ...
4
votes
1answer
645 views

Intranet corporate SSO for webapps against Active Directory

I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS: Corporate portal (Drupal backend) Project management (Project.NET) ...
2
votes
1answer
676 views

Apache2/Shibboleth TCP connections stuck in CLOSE_WAIT

I run an Apache2 server which uses the Shibboleth daemon (shibd) as federated authentication module. Certain server connections using Shibboleth seem to stick permanently in CLOSE_WAIT state. tcp ...
1
vote
1answer
168 views

Reverse Proxy for Shibboleth not sending request POST

I am trying to send the POST request that is sent from Authenticating shibboleth back to my web server, but I am only getting a GET request. When this GET request is proxied to my web server's ...
1
vote
1answer
222 views

Does Shibboleth IdP 3 automatically echo relay state by default?

Maybe this is a dumb question, but I can't find any anything about this in the documentation or elsewhere. According to the SAML spec, I know that the IdP is supposed to echo back the relay state ...
1
vote
1answer
551 views

How to Uninstall Shibbolet 2.5 from Windows 10 and Windows Server 2012

I'm attempting to uninstall shibboleth-sp-2.5.6.0-win64.msi from my Windows 10 PC.(I have the same problem on Windows Server 2012). It gets stuck with the following message: Please wait while the ...
1
vote
1answer
2k views

Shibboleth does pass attribute to server variable in PHP

I am building a SAML based federated authentication mechanism in which the IdP is ADFS 2.0 and the SP is Shibboleth running on Linux. I am able to do the following: Attempt to access a protected ...
0
votes
1answer
2k views

AuthType shibboleth configured without corresponding module

I am trying to set up a shibboleth configuration but have now hit an error I do not know how to deal with: When accessing a site, which I configured to be protected by shibboleth, I receive a 500 ...
0
votes
1answer
506 views

Shibboleth/Nginx run on non-standard port

Our team runs all our Nginx installations on 8443 instead of 443 for the obvious reason that you don't need to be root to listen on the port, and so the process can be started and stopped with lower ...
0
votes
1answer
444 views

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate ...
0
votes
1answer
848 views

Shibboleth-Idp setup: Issue with the data-connectors in attribute-resolver.xml

I have setup the shibboleth-Idp as servelet in servelet container tomcat6. However, tomcat start the servelet fails to load. My data connectors are causing it. The code I am using for connectors is ...
3
votes
0answers
2k views

Shibboleth SP doesn't redirect, no IdP authentication - Error 403.14 w/ IIS 7.5

I'm trying to get a test server setup as a Shibboleth SP using IIS 7.5 and I'm stuck. I'm using the https://idp.testshib.org/idp/shibboleth IdP but it never asks for credentials or redirects to the ...
1
vote
0answers
16 views

Upgrading Ubuntu 14.04 hosts to support Shibboleth SP 3

I've inherited a few Ubuntu 14.04 hosts which are configured with Shibboleth auth through Apache. They run rails/apache. The installed packages(1) on these hosts is libapache2-mod-shib2 along with a ...
1
vote
0answers
492 views

Shibboleth not setting REMOTE_USER

I'm relatively new to Shibboleth but I can't seem to get past the issue of communicating the REMOTE_USER to my application. My stack is shibd 2.5.3 and Apache 2.4.18 feeding into a Gunicorn server ...
1
vote
0answers
429 views

Install Shibboleth on IIS with multiple sites

I'm installing shibboleth2, version 2.6.0.1 64 bit on a Windows 2008 Server. I've installed it at the server level and I have multiple sites hosted and are currently running. I've had one install ...
1
vote
0answers
77 views

protect IIS site with Shibboleth SP on certain IP

I host a webserver and want customers to authenticate using their ADFS server. I cannot reach their server, they reach mine and theirs. This basically works. I now wonder if it's possible to setup ...
1
vote
0answers
838 views

ShibRequestSetting REMOTE_ADDR setting and Apache RequestHeader

I have Apache/Shibboleth serving requests to a reverse proxy and directly to web clients. When a request comes through the proxy I extract the original IP address and attempt to send it to shibboleth. ...
1
vote
0answers
490 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
0
votes
0answers
13 views

Shibboleth: add IDP and SP entityID to attribute value

I have an attribute value (identifier) that looks like following: 5678 I would like to add entityID of both IDP and the recipient SP to get the (targeted) attribute value: idp-entity-id!sp-entity-id!...
0
votes
0answers
26 views

/shibboleth.sso/metadata gives dont have permission to access on this server

I configured httpd as a reverse proxy for our puma and have configured to use shibd as the SP. But, every time I try to access mysite/Shibboleth.sso/metadata it gives me forbidden . Looking into my ...
0
votes
0answers
21 views

Shibboleth IdP - Generating eduPersonTargetedID

How to properly generate eduPersonTargetedID based on an existing attribute from LDAP? So far I have approximately the following in attribute-resolver.xml: <AttributeDefinition xsi:type="...
0
votes
0answers
20 views

Using shibboleth with out-of-process application servers

I have a legacy CGI application which I've convinced to run under plack (specifically, it runs in starman, but I don't think that's relevant to the question). The kinks around persistent vs. ...
0
votes
0answers
219 views

How to add email attribute to ADFS IdP SAML assertion for Shibboleth 2.5 as SP

I have successfully configured Apache 2 with libapache2-mod-shib2 on Debian to accept SAML assertions from ADFS (v2.0 from my understanding) In ADFS, the only way I found out to transfer user ...
0
votes
0answers
760 views

Shibboleth reverse proxy configuration

We have a service at some domain example.com. This application is protected by shibboleth, and is behind a reverse proxy. Have tried what was in documentation: https://wiki.shibboleth.net/confluence/...
0
votes
0answers
374 views

Why my websockets application deployed on tomcat is not getting the shibboleth headers?

My stack looks like this: Apache httpd server 2.4.12: with mod_shibd, mod_proxy_http & mod_proxy_wstunnel Shibboleth 2.5 Apache Tomcat 7.0.54 Our scenario looks like this: --------- -...