IDP SSO binding - HTTP Redirect and Post

76 views
Skip to first unread message

Sylvain Medard

unread,
Jul 22, 2014, 4:53:12 AM7/22/14
to simple...@googlegroups.com
Hi,

I'm trying to run SimpleSamlphp Idp with SSP and Shibboleth SP into a federation. I want to define two SSO bindings (HTTP-Redirect and Post).
I tried on saml20-idp-hosted.php:

'SingleSignOnServiceBinding' => array('urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect','urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'),

but they take the same location when

'SingleSignOnService' =>

take only a string and not an array.

How can configure two different inbound binding on the IDP metadata ?

Thanks in advance,
Sylvain.

Peter Schober

unread,
Jul 22, 2014, 6:24:39 AM7/22/14
to simple...@googlegroups.com
* Sylvain Medard <medard....@gmail.com> [2014-07-22 10:53]:
> I'm trying to run SimpleSamlphp Idp with SSP and Shibboleth SP into a
> federation.

You don't need to anything special wrt that, just feed them both the
other party's metadata.
-peter

Sylvain Medard

unread,
Jul 22, 2014, 10:00:26 AM7/22/14
to simple...@googlegroups.com, peter....@univie.ac.at
Thank you Peter.

Can the post binding and redirect binding indicate the same location (ie SSOService.php) in the metadata ? and both support works ?

Regards,
-sylvain.

Peter Schober

unread,
Jul 22, 2014, 10:07:03 AM7/22/14
to simple...@googlegroups.com
* Sylvain Medard <medard....@gmail.com> [2014-07-22 16:00]:
> Can the post binding and redirect binding indicate the same location (ie
> SSOService.php) in the metadata ? and both support works ?

The metadata needs to be correct. The easiest way to achieve that is
to get it from the entity itself. Which I just told you before.
-peter
Reply all
Reply to author
Forward
0 new messages