...
- Add the filter using the Internet Services Manager console. Right click on the "Web Sites" icon on the left, and bring up the Properties dialog. On the "ISAPI Filters" tab, add a new filter called Shibboleth and specify the
libexeclib\shibboleth\isapi_shib.dll
library (orĀlib64\shibboleth\isapi_shib.dll
for a 64-bit IIS). The priority should beHigh
. You won't see any visual indication it was loaded until after making requests to the server. - Map the
.sso
file extension to the ISAPI library so that virtual URLs can be specified to invoke the extension handler for each web site. On theHome Directory
tab, add a script mapping using theConfiguration
button. TheExecutable
box should point toisapi_shib.dll
, and the "Extension" can be set to anything unlikely to conflict, but.sso
is assumed (and the dot must be included). You should NOT select the option to limit verbs, and you MUST uncheck theCheck that file exists
box. - Add the Shibboleth ISAPI Extension to the list of permitted extensions in the list of allowed extensions.
- Restart IIS and make sure the filter shows up with a green arrow once you access the site. Check the Windows event log and/or the Shibboleth logs if it fails to load.
...