...
- Add the filter using the Internet Services Manager MMC console. Right click on the machine icon on the left, and edit the WWW Service master properties. On the "ISAPI Filters" tab, add a new filter called Shibboleth and specify the
libexeclib\shibboleth\isapi_shib.dll
library (orĀlib64\shibboleth\isapi_shib.dll
for a 64-bit IIS). The priority should beHigh
, and once the filter is loaded, make sure it appears in the list below thesspifilt
entry. Restart IIS and make sure the filter shows up with a green arrow. Check the Windows event log and/or the Shibboleth logs if it fails to load. - Map the
.sso
file extension to the ISAPI library so that virtual URLs can be specified to invoke the extension handler for each web site. Right click on the machine icon on the left, and edit the WWW Service master properties. On theHome Directory
tab, add a script mapping using theConfiguration
button. TheExecutable
box should point toisapi_shib.dll
, and the "Extension" can be set to anything unlikely to conflict, but.sso
is assumed (and the dot must be included). You should NOT select the option to limit verbs, and you MUST uncheck theCheck that file exists
box. - Restart IIS.
...