Questions tagged [shibboleth]

A standards based, open source software package for web single sign-on across or within organizational boundaries.

The Shibboleth software implements widely used federated identity standards, principally OASIS' Security Assertion Markup Language (SAML), to provide a federated single sign-on and attribute exchange framework.

Shibboleth also provides extended privacy functionality allowing the browser user and their home site to control the attributes released to each application.

Using Shibboleth-enabled access simplifies management of identity and permissions for organizations supporting users and applications.

Shibboleth is developed in an open and participatory environment, is freely available, and is released under the Apache Software License.

559 questions
0
votes
1 answer

Issue with Shibboleth SP Compilation and Installation on Ubuntu 14.04

I followed the steps below to install Shibboleth SP on Ubuntu 14.04 Installed the pre-requisite packages sudo apt-get install --yes wget gcc g++ make libssl-dev libcurl4-openssl-dev apache2-threaded-dev Created directories mkdir -p…
am3
  • 681
  • 2
  • 12
  • 30
0
votes
1 answer

Redirecting me to Shibboleth.sso/SAML2/POST

So I set up shibboleth. In my configuration file I set the location to /loginaction.do. However when the user logs in it redirects them to /Shibboleth.sso/SAML2/POST. Why is this happening? Please help!!!
user3550366
  • 125
  • 2
  • 13
0
votes
1 answer

Can't figure out why SAMLMessageSignature.Verify is returning false

I have setup Shibboleth as an IdP, using its default credentials (the certificates bundled with the installer). I think it is using the idp-signing.crt certificate to sign SAML responses. Using the LowLevelAPI ShibbolethSP example project, I have…
Jez
  • 27,951
  • 32
  • 136
  • 233
0
votes
1 answer

Shibboleth IDP custom login handler best way to throw error to the idp error handler

I have shibboleth idp 2.4.0 implementation where I have a custom login handler. I have tried throwing ServletException from the custom handler's servlet, but the resulting idp error.jsp is not displaying any specific error messaging. Is there a…
jodowd
  • 1
  • 3
0
votes
1 answer

Login Handlers authentication methods in Shibboleth

I am using the following login handlers in the handler.xml file, I don't know why these many login:Handlers are supported, As i know that, we are using "externalAuthn" Login handler but i don't know why we are using the remainng handlers. May i know…
User
  • 173
  • 1
  • 12
0
votes
0 answers

IdP status page returns "HTTP Status 404"

I am using shibboleth idp to use sso for my project, but in the configurations like idp.xml i am using relative paths instead of absolute path(E:\SRDM2.3.0.6904.10\SRDM\Svr\IdP\IdPserver\idp)
majji
  • 169
  • 2
  • 3
  • 19
0
votes
0 answers

Use Relative path in place of absolute path

First of all i request people do not consider it as a duplicate question, please look into query. I am copying the xml files from one folder to other folder, in the source folder, i have some files which have some content like…
M.S.Naidu
  • 2,239
  • 5
  • 32
  • 56
0
votes
1 answer

Shibboleth installation needs Apache to protect java based application in windows?

I have Tomcat only installed in my app server and I will be protecting with Shibboleth a java based application that tomcat serves. Do I need apache installed as well in order to do that or can I just configure the Apache files that are included in…
DAlva
  • 31
  • 1
  • 3
0
votes
0 answers

SAML Secured AuthnRequest Fails

I'm not able to make a secured ECP AuthnRequest to my Shibboleth IdP. I've got a small proof of concept SP running which is based heavily on the Spring SAML extension sample app. My SP metadata was generated using the Spring SAML extension sample…
AndyB
  • 1,896
  • 2
  • 22
  • 32
0
votes
1 answer

Set attributes from a custom LoginHandler

I developed a LoginHandler for Shibboleth and I need to set some attributes so Shibboleth can put them on a SAMLResponse. I am being able only to set the PrincipalName, using HttpServletRequest.setAttribute(LoginHandler.PRINCIPAL_NAME_KEY, value),…
dudinha-dedalus
  • 284
  • 3
  • 13
0
votes
1 answer

Application testing with Office365 using Azure AD

I'm trying to test my application with Office365 SSO. Since this is the test app, I don't have AD installed on my machine (and unable to use corporate AD either). My application only supports Shibboleth connection. I've got a default domain on…
Timka
  • 1,769
  • 1
  • 20
  • 27
0
votes
2 answers

Shibboleth being passed as referrer in Analytics

Been searching for an answer for this for a while but nothing that I can find that is useful. Basically in the organisation I work in we use Shibboleth for user authentication. We probably have 200+ sites & Shibboleth works effectively for…
0
votes
1 answer

Shibboleth not setting attributes after expiration

I'm using Shibboleth as the SP in my SAML authentication for my asp.net application. The Idp authenticates the user and sends the response to shibboleth which sets http request variables for each of the attributes returned from the Idp. The logs…
B.McCarthy
  • 123
  • 1
  • 1
  • 13
0
votes
1 answer

Get client/original request parameters on IdP

I'm looking but I don't found a way to get the client/orginal request parameters (get or post) on the IdP, I need them to perform a custom login handler based on a token that comes on the request to the resource. I inspect the request on my browser…
0
votes
1 answer

Setting up Shibboleth IdP with LDAP

I am attempting to use LDAP with Shibboleth. I am nearly there, but I cannot authenticate. I followed these instructions, and my login.config file contains the following: ShibUserPassAuth { edu.vt.middleware.ldap.jaas.LdapLoginModule required …
IanPudney
  • 5,941
  • 1
  • 24
  • 39