You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

This guide describes how the Shibboleth v3 SP can be configured as a SAML Service Provider for eduTEAMS. 

Shibboleth (pronounced "Shibboleth") is the reference implementation of the OASIS SAML standard.

Setting up the Shibboleth Service Provider is beyond the scope of this document. Many resources are available, such as the Shibboleth Wiki (https://wiki.shibboleth.net) and the installation instructions supplied and maintained by SWITCH (https://www.switch.ch/aai/guides/sp/installation/).

It is assumed in the following that you are using Shibboleth's v3 SP alongside the Apache webserver.

Shibboleth configuration

Locate the file shibboleth2.xml. For example, using the switch.ch instructions for an Ubuntu Linux system, you will find the file at /etc/shibboleth/shibboleth2.xml.


We show to the right, sections of the file you will need to enter information relevant to your installation.



[...]

<!-- By default, in-memory StorageService, ReplayCache, ArtifactMap, and SessionCache are used. See example-shibboleth2.xml for samples of explicitly configuring them. -->
<!-- The ApplicationDefaults element is where most of Shibboleth's SAML bits are defined. -->
<ApplicationDefaults entityID="https://rohu.geant.org/shibboleth"
    REMOTE_USER="mail"
    cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:
                  !TLSv1:!TLSv1.1"
    >

[...]
[...]

<!--
Configures SSO for a default IdP. To properly allow for >1 IdP, remove
entityID property and adjust discoveryURL to point to discovery service.
You can also override entityID on /Login query string, or in RequestMap/htaccess.
-->
<SSO entityID="https://login.terena.org/wayf/saml2/idp/metadata.php">
SAML2
</SSO>

[...]

[...]

<SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Login"
                  entityID="https://login.terena.org/wayf/saml2/idp/metadata.php"
                  target="https://rohu.geant.org/"
                  relayState="cookie">
     <SessionInitiator type="SAML2" template="bindingTemplate.html"/>
     <SessionInitiator type="Shib1"/>
</SessionInitiator>

[...]

Apache configuration


  • No labels