Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 4.0

Wiki MarkupIDP Configuration: *\[Shibboleth 2.0\]* \\

To interoperate with NIH the following changes/additions need to be made to the Shibboleth configuration files (examples are from NIH/InCommon interop on a Shibboleth IdP running HA_Shib):

...

                              xmlns="urn:mace:shibboleth:2.0:resolver:ad"

Wiki Markup                              scope="\                              scope="[YOUR_INSTITUTION_HERE\].edu" Wiki Markup                              sourceAttributeID="\

                              sourceAttributeID="[YOUR_EPPN_SOURCE_HERE\]">

Wiki Markup&nbsp;&nbsp;    <resolver:Dependency ref="\[YOUR_DEPENDENCY_HERE\]" />

   <resolver:AttributeEncoder xsi:type="SAML1ScopedString"

...

<RelyingParty id="https://federation.nih.gov/FederationGateway"

Wiki Markup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;provider="\              provider="[YOUR_IDP_URN_HERE\]" Wiki Markup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;defaultSigningCredentialRef="\

              defaultSigningCredentialRef="[YOUR_INCOMMON_CREDENTIAL_HERE">

   <ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile"

...

<RelyingParty id="https://soadev.nih.gov/FederationGateway"

Wiki Markup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;provider="\              provider="[YOUR_IDP_URN_HERE\]" Wiki Markup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;defaultSigningCredentialRef="\

              defaultSigningCredentialRef="[YOUR_INCOMMON_CREDENTIAL_HERE">

   <ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile"

...

More info http://groups.google.com/group/shibboleth-users/browse_thread/thread/ef5ea6086a2c1c9e

4) Test Link after the completion of above steps:‐

 https://soadev.nih.gov/FederationGateway

...