...
Download the appropriate MSI package for your system from https://shibboleth.net/downloads/identity-provider/latestlatest3/.
Install the appropriate Oracle Java runtime and set the JAVA_HOME environmental variable to point to the installation (My Computer->RightClick->Properties->Advanced System Settings->Environmental Variables->System Variables->New)
...
- The installation location is where the IdP will be installed (the
idp.home
directory). When performing an upgrade, you should specify the location used before. - If you are not using the bundled Jetty container you will need to configure it to set idp.home to the installation directory (
-Didp.home=C:/Program Files (x86)/Shibboleth/IdP
) (but make sure that you avoid backlashes in the path you supply, as this will not function properly and is not supported). - The DNS name of the IdP should be something well-chosen and stable, and not the physical name of a server that might change.
- The scope value should be a DNS subdomain, typically your organizational email domain, that will be used to compute the value of "scoped" attributes to make them unique.
- Check the "Install Jetty" box if you want the installer to install and configure a Java container for you (but you should only do this if you can accept a very vanilla Jetty configuration). This will configure a system service called "shibd_idp" which can be controlled via the usual mechanisms or via the program
C:\Program Files(x86)\Shibboleth\procrun\shibd_idpw.exe
- If you check the "Configure for Active Directory" box, then you will see a second configuration page to provide connection details for Active Directory:
...
Note | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||
It has been observed (in
|
...
- The 64 bit installer will not run on a 32 bit machine
- The 32 bit installer will not run on a 64 bit machine.
- If you configured jetty and installed the 64 bit installation on a machine which has a 32 bit Java installed then the service will not start. The best fix is to install a 64 bit Java, but you can force the IdP to run with a 32 bit Java by changing the procrun executable
C:\>sc config shibd_idp binPath= "\"C:\Program Files (x86)\Shibboleth\ProcRun\shibd_idp.exe\" service shibd_idp"
Java Installed from a .tar.gz file (tarball)
...
Non JRE Installations
Note |
---|
If you are installing a Java 11 JDK this applies to you |
The component that the installation uses to run jetty only understand JRE layouts and may not be able to locate you copy of Java. This will prevent Jetty (and hence the IdP) from starting)
To fix this:
- run
shibd_idpw
- Go to the "java tab"
- Unclick "Use Default"
- Under "Java Virtual Machine" browse to
%JAVA_HOME%\jre\bin\server\jvm.dl
l (for instance:C:\Program Files\java\jdk1.8.0_25\jre\bin\server\jvm.dll
)the JVM
Troubleshooting the Jetty installation
...