...
| Expand | |||||
|---|---|---|---|---|---|
| |||||
Go to your SP installation directory(
"overall configuration is loadable, check console fornon-fatal problems"If there is error, check log for detail. All the log files are in SP installation directory\var\log\shibboleth |
...
Register Service Provider with IDP
...
Get SP metadata
Restart IIS and the Shibboleth Daemon. The Shibboleth Daemon can be restarted using the Administrative Tools > Services navigation.
...
Save your metadata file. You'll need to submit your SP's metadata in shibboleth integration request form.
2. Register Service Provider with Cornell Identity Provider
If your site is configured with test IDP, you don't have to submit Shibboleth integration request form because test IDP supports anonymous SP. You can start testing the authentication of your site.
For sites configured with prod IDP, submit your shibboleth integration request from https://shibrequest.cit.cornell.edu. On the second page of request form, select 'No' for question "Has the application service provider's metadata been published with InCommon?". Use text editor open your SP's metadata, copy the content of the metadata and paste it in the request form.Once the form is submitted, Identity Management get a Remedy case. We'll configure your SP in prod IDP in 1 - 2 business day. We'll notify you when the configuration is complete.
Test SP integration with IdP
Confirm that you are able to log in with your netID and that attributes are properly released.
- Using a web browser, visit the /secure directory (or other protected location) of your SP.
- If you are prompted to log in, that means that your SP is properly integrated with Cornell IdP.
- After you log in, open a new tab of the same browser and point your web browser to https://<your dns name>/Shibboleth.sso/Session. Your browser should return a status page that show you all the attributes and values released to your SP.
Need Help?
contact idmgmt@cornell.edu
...