Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  •  Find <ApplicationDefaults entityID="https://sp.example.org/shibboleth"REMOTE_USER=... >.
    EntityID is the unique :  Unique identity for your SP. Cornell Shibboleth Identity Provider(IDP) provides service to many applications. This entityID will help Cornell IDP to identify your SP. We recommend you follow shibboleth convention named it "https://yourDomainNamexxx/shibboleth". It's better not include space or special characters in it( / or : are fine). One SP can server multiple sites in your Apache so it does not necessarily equate to the hostname(s) at which your service runs.

    REMOTE_USER: a special server variable used to pass the primary identifier of authenticated user. If your website is just for Cornell netID user, you can change its value to "uid". Otherwise set its value to "eppn"
  •  Find  <Sessions ... handlerSSL="false" cookieProps="http">, set handlerSSL="true" and cookieProps="https".

...