Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [shibboleth]

Open Source identity authorization and management solution, providing Single Sign On (SSO)

Shibboleth is an identity solution for Single Sign On (SSO) authentication. It began as an Internet2 Middleware activity in 2000.

73 questions
1
vote
0 answers

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before enabling IDP integration with shibboleth idp on…
rgh
  • 11
  • 3
0
votes
1 answer

shibd daemon 'timeout' on systemctl start

I have a server that uses the shibboleth2 shibd daemon to allow remote authentication to a database. The daemon reads a very large federation metadata file on starting/reloading (circa 34MB). This needs several minutes to process. Previously it…
fred2
  • 97
  • 9
0
votes
1 answer

Install shibboleth timeout in centos

I am trying to install Shibboleth via ansible in a centos-7 machine which is hosted in AWS. But am getting "Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds" error for installing Shibboleth and all its dependencies. I…
SANN3
  • 103
  • 3
0
votes
1 answer

Shibboleth IdP won't start with Jetty 9.3

I've been following this guide to install Shibboleth Identity Provider 3.3.2 on Jetty 9.3.22 (Ubuntu Server 16.04 with Oracle JDK 8u151). At https://my.server.ip/idp I get a 503 error (Service Unavailable). Jetty Home: /opt/jetty/jetty-distribution…
Todd
  • 198
  • 2
  • 3
  • 9
0
votes
1 answer

Redirect website login to different IDP

My organization has a Shibboleth/IDP service set up. Now that I am getting involved, I am first setting up my own basic IDP on a test server to learn the ropes. In order to test functionality, I want to be able go to one of our production sites and…
UnworthyToast
  • 145
  • 5
0
votes
1 answer

Shibboleth SPNEGOAuthnConfiguration in CentOS server

I have requirement were the user's were already joined to domain logged in using the same credential from ldap server, they don't want to enter it again to login into shibboleth SSO, so I searched over Shibboleth document, it already has support for…
CoolMonster
  • 61
  • 5
0
votes
0 answers

Why my websockets application deployed on tomcat is not getting the shibboleth headers?

My stack looks like this: Apache httpd server 2.4.12: with mod_shibd, mod_proxy_http & mod_proxy_wstunnel Shibboleth 2.5 Apache Tomcat 7.0.54 Our scenario looks like this: --------- -------------- --------------- |Browser|…
Gaucho
  • 101
  • 2
0
votes
1 answer

Scandinavian characters get messed up in Shibboleth SP header attributes

I have Shibboleth SP 2.5 with Apache 2.4 in front of Domino 9.0.1 server on Windows server 2008 R2. This is the beginning of the incoming SAML message from Shibboleth SP debug log: And here is…
Panu Haaramo
  • 343
  • 7
  • 20
0
votes
1 answer

AuthType shibboleth configured without corresponding module

I am trying to set up a shibboleth configuration but have now hit an error I do not know how to deal with: When accessing a site, which I configured to be protected by shibboleth, I receive a 500 error, with apache's error log…
alex
  • 417
  • 1
  • 7
  • 10
0
votes
2 answers

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to https://adfs/adfs/ls/SomeSamlRequest, the browser…
Julian B
  • 33
  • 1
  • 4
0
votes
2 answers

Shibboleth 3 - SAML response for Attribute

I have configured Shibboleth 3 to give the SAML response containing the following Attribute Statement
Vinay Joseph
  • 101
  • 4
0
votes
1 answer

Shibboleth SP - Signing and Encryption Key

I have a Shibboleth SP installed on Server 2012 R2. I tried to submit the metadata to be imported into the IDP and was told that without having the signing or encryption key, they won't be able to send the SP any assertions. From what I've found on…
OrangeGrover
  • 595
  • 3
  • 10
  • 25
0
votes
2 answers

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on HTTP request from SAML to Basic authentication…
chowmojo
  • 1
  • 3
0
votes
1 answer

Why shibboleth IdP idp-metadata.xml recommends 8443 for SOAP?

After the install.sh of 2.4.0 Shibboleth Identity Server, the idp-metadata.xml file is created. Why is that? Is not enough secure to use the standard HTTPS/443 port?
toma
  • 1
  • 1
0
votes
2 answers

Upgrade Shibboleth to newest version on Ubuntu

I have an Ubuntu (12.04.4 LTS) web server running Shibboleth 2.4.3 I think Shibboleth was installed using apt-get dpkg --get-selections | grep shib libapache2-mod-shib2 install libshibsp5 install shibboleth-sp2-schemas …
joevallender
  • 191
  • 1
  • 1
  • 7
1 2 3
4
5