Ok, it looks like they modified the configure.html page on testshib to reflect
the 3.x branch of Shibboleth, since 2.x is being de-supported as of mid-2016.
To set this up on our 2.x server originally, I did this:
Edit /opt/shibboleth-idp/conf/relying-party.xml (where /opt/shibboleth-idp/conf
is the location of your shibboleth-idp's config folder.)
Under <MetadataProvider id="ShibbolethMetadata"
xsi:type="ChainingMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata">
add something like
<MetadataProvider id="HTTPMetadataTESTSHIB"
xsi:type="FileBackedHTTPMetadataProvider"
backingFile="/opt/shibboleth-idp/metadata/testshib-providers.xml"
metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"/>
Then restart Tomcat.
After doing so, you should be able to connect, assuming that your account is
set up properly. To do this:
visit https://sp.testshib.org/
Enter the full URL of your shib install in the box, then click the Go! button.
If you get this error: Unable to locate metadata for identity provider
(https://shibboleth.millikin.edu/idp/shibboleth) then that means that you need
to upload your metadata file on the register page:
https://www.testshib.org/register.html (the instructions there still look good
for 2.x) (Even if you have uploaded the file previously, I've found that they
clear them out occasionally, so you may need to re-upload it.)
At that point, if you still can't access it, please click on the "shibd.log"
and "native.log" buttons to access the logs from the testshib SP for further
troubleshooting details.
Chris
>>> Mostafa Tabal <[email protected]> 01/10/16 3:20 AM >>>
Hi,
i didn't understand this link :-
http://www.testshib.org/configure.html
and i couldn't configure .
please help
i open idp-proccess.log
and i found :-
-No metadata for relying party https://sp.testship.org/ shibboleth-sp couldn't
be resolved
- Saml2 sso profile is not configured for https://sp.testship.org/ shibboleth-sp
On Thursday, January 7, 2016 at 4:50:59 PM UTC+3, Christopher Myers wrote:Hi!
It looks like you haven't walked through configuring your Shib instance to be
used with testshib; please see http://www.testshib.org/configure.html and
follow the "post install idp config" instructions.
Chris
>>> Mostafa Tabal <[email protected]> 01/07/16 2:19 AM >>>
Hi,
i deploy shibboleth idp 204 on tomcat 7 and follow the configuration:-
https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration
and when i test by this link :- https://sp.testshib.org/
i got error message :-
ERRORAn error occurred while processing your request. Please contact your
helpdesk or user ID office for assistance.
This service requires cookies. Please ensure cookies are enabled in your
browser, then go back to your desired resource and try to login again.
Use of your browser's back button may cause specific errors that can be
resolved by going back to your desired resource and trying to login again.
If you think you were sent here in error, please contact technical support
Error Message: SAML 2 SSO profile is not configured for relying party
https://sp.testshib.org/shibboleth-sp
how can i solve this problem , please ?
Thanks
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
