Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

...

The Shibboleth module needs to be informed that the information it's receiving from the web server has been altered by the deployment environment to handle SSL load balancers/accelerators properly. This can be done for Apache by specifying

  • Apache httpd: For older versions of Apache httpd (up to 2.0) you can specify ShibURLScheme https within the appropriate <VirtualHost> in httpd.conf. From Apache httpd Version 2.1 on the scheme (and port) is given as part of the ServerName directive, e.g.
    Code Block
    
    ServerName https://sptest.tut.fi:443
    UseCanonicalName On
    
  • For IIS, this must be specified directly in shibboleth.xml by modifying the <Site> element:
    Code Block
    xml
    xml
    
    <Implementation>
    	<ISAPI normalizeRequest="true">
    		<Site id="1" name="sptest.tut.fi" scheme="https"/>
    	</ISAPI>
    </Implementation>