This document describes the procedure used to install Shibboleth Service Provider (SP) software on Centos/RedHat, and to configure it to work with the Cornell Shibboleth Identity Provider (IdP).

Installation

Follow instruction on https://wiki.shibboleth.net/confluence/display/SP3/RPMInstall to install Shibboleth. 

Configuration

After installation Shibboleth configuration files will be placed at /etc/shibboleth/ and the necessary Apache configuration in /etc/httpd/conf.d/shib.conf.

1. Configure SP to work with Cornell IDP. Open /etc/shibboleth/shibboleth2.xml. 

•  Find <ApplicationDefaults entityID="https://sp.example.org/shibboleth"REMOTE_USER=... >.
  EntityID is the unique identity for your SP. Cornell Shibboleth Identity Provider(IDP) provides service to many applications. This entityID will help Cornell IDP to identify your SP. We recommend you follow shibboleth convention named it "https://yourDomainName/shibboleth". It's better not include space or special characters in it( / or : are fine).
•  Find  <Sessions ... handlerSSL="false" cookieProps="http">, set handlerSSL="true" and cookieProps="https".