我的服务器(iis)上有配置服务提供程序,似乎一切正常。登录好。 SAML编码很好。 但它会将我重定向到" https://example.com/Shibboleth.sso/SAML2/POST " 我想去" https://example.com/secure/index.html "
以下是我的配置
<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
clockSkew="180">
<InProcess logger="native.logger">
<ISAPI normalizeRequest="true" safeHeaderNames="true">
<Site id="1" name="mydomain.com" scheme="https" port="443"/>
</ISAPI>
</InProcess>
<RequestMapper type="Native">
<RequestMap>
<Host name="mydomain.com">
<Path name="secure" authType="shibboleth" equireSession="true"/>
</Host>
</RequestMap>
</RequestMapper>
<ApplicationDefaults entityID="https://www.example.com/shibboleth"
homeURL="https://example.com/secure/index.html"
REMOTE_USER="eppn persistent-id targeted-id">
<Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
handlerURL="/Shibboleth.sso" handlerSSL="false"
exportLocation="http://example.com/Shibboleth.sso/GetAssertion"
checkAddress="false" cookieProps="https">
<SSO entityID="https://test-idp.ukfederation.org.uk/idp/shibboleth" discoveryProtocol="WAYF" discoveryURL="https://wayf.ukfederation.org.uk/WAYF">
SAML2 SAML1
</SSO>
<Logout>SAML2 Local</Logout>
<Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>
<Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
<Handler type="Session" Location="/Session" showAttributeValues="false"/>
<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
<Handler type="AttributeChecker" Location="/AttrChecker" template="attrChecker.html"
attributes="eppn" flushSession="true"/>
</Sessions>
<Errors supportContact="support@mydomain.com"
helpLocation="/about.html"
styleSheet="/shibboleth-sp/main.css"/>
<MetadataProvider type="XML" uri="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml"
backingFilePath="ukfederation-metadata.xml" reloadInterval="14400">
<MetadataFilter type="RequireValidUntil" maxValidityInterval="2592000"/>
<MetadataFilter type="Signature" certificate="ukfederation.crt"/>
</MetadataProvider>
<AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map.xml"/>
<AttributeResolver type="Query" subjectMatch="true"/>
<AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
<CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>
</ApplicationDefaults>
<SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/>
<ProtocolProvider type="XML" validate="true" reloadChanges="false" path="protocols.xml"/>