0

I've just tried to resolve my question reading oldest post on this forum, but i think i need some direct answer for my problem. so pls be patience with me. I'm making a web application for my university in witch i have to send a Mac address from my shibboleth sp to the university idp, and if idp matchess Mac it will respond me with some other info correlated with Mac. Now, i have configured my sp following this guide 'https://www.testshib.org/'. My configuration is in local so at the end these are my questions:

1) the entityID of my SP how should it be? i'm using an idp like that: "servername.org/shibboleth-sp". I really don't know if it's correct because it will be associate with a real organizzation and maybe it's better an idp like: "univerity_x_servername.org/shibboleth-sp/".

2) As I just said, my SP is in local, and i don't understand if i can only send my metadata to idp just attaching the file that i can download in local from "https://servername/Shibboleth.sso/Metadata" or maybe i can pass a link with witch the idp can download itself my metadata. someone know how can i implement the second case, by passing a single link for the download.

3) last and less important question. the guide that i've followed to configure sp, test it at the end by opening an index page on my secure directory in local "/var/www/html/secure/". i didn't yet understant what type of check is it. so if someone have already used that guide and can explain the final test it will be awesome .

Thanks.

ps: i hope you will understand this post, i know that my english sucks. sorry

Oleks
  • 1,633
  • 1
  • 18
  • 22
gabriele.taibi
  • 21
  • 4

1 Answers1

1
  1. You can use any entityId, it doesn't matter. Refer this
  2. You can do both, put the configuration in shiboleth2 configuration file. If you have put URL then idP will take URL or if you have put filename then idp will download that filename.

You can download the file from that URL(https://.../Metadata) and change and then save and then put it on your server

  1. Shibboleth is not doing authentication at SP, it is just for Authorization. What I mean by that is, you have configured to protect /secure path. So primary task of shibboleth SP is that - it won't allow any user to access that page until user have valid authentication in idP. You can configure any other path too. In addition to authorization, it gives use the data about user.

My this, this and this answers may help you.

Community
  • 1
  • 1
Akshay
  • 3,558
  • 4
  • 43
  • 77