Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,456,931
Community Members
 
Community Events
176
Community Groups

Shibboleth SP with Azure AD

Hi,

i have integrated shibboleth SP to my codeigniter app.

The first problem i have is that i can't acces www.example.com/Shibboleth.sso.. because it is returning 404.

Then i made a workaround and created a new folder in apache's default directory (for me var/www/html/xxx/yyy/zzz/shibdemo) and created a .htaccess file with this properties:

AuthType shibboleth
<IfVersion < 2.3>
ShibCompatWith24 On
</IfVersion>
ShibRequestSetting requireSession true
require shib-session

 

My shibboleth2.xml:

->  <ApplicationDefaults entityID="https://example.com/shibdemo" signing="true"
encryption="false"
REMOTE_USER="SHIB_EPPN eppn persistent-id targeted-id"
cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">

-> <SSO entityID="https://sts.windows.net/yyyyyy-aaaaaa-hhhhhhh-xxxxxxx/"
discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
SAML2
</SSO>

-><MetadataProvider type="XML" validate="false" path="partner-metadata.xml"/>

I created metadata file with shib-metagen command and uploaded them to my azure non gallery app and then downloaded federation metadata, saved as partner-metadata.xml

 

Now my Reply url is set as https://example.com/shibdemo/Shibboleth.sso/SAML2/POST


Now if i access www.example.com/shibdemo it redirects me to login page for microsoft. But after login i get error -> url mismatch because saml request (response) is pointing to https://example.com/Shibboleth.sso/SAML2/POST. And if i change reply url to that url i once again get 404 error.

Please somebody help me:)

 

1 answer

0 votes
Visshal I'm New Here Sep 26, 2022

Are you going through the hierarchy of the following ?

As a pre-requisite to starting the steps below, please review the benefits, user experiences, and requirements of single sign-on in Prepare for single sign-on
  1. Run through the detailed instructions in Configure Shibboleth for use with single sign-on.
  2. Install Windows PowerShell for single sign-on with Shibboleth 
  3. Set up a trust between Shibboleth and Azure AD 
  4. Follow the detailed instructions in Directory synchronization roadmap  to prepare for, activate, install a tool, and verify directory synchronization.
  5. Verify single sign-on with Shibboleth

Thanks

Suggest an answer

Log in or Sign up to answer
TAGS

Atlassian Community Events