Shibboleth hosted IdP Metadata generation

By: Martin user 15 Jun 2016 at 1:58 a.m. CDT

2 Responses
Martin gravatar
I was looking for a way to change gluu's hosted IdP metadata in a persistent way, but was surprised to see the metadata recreated after a restart. Also, even changing the xxxxx-idp-metadata.xml file on disk was not reflected in the idp/shibboleth endpoint? How and when is the Shibboleth hosted IdP metadata generated and how can I disable the POST binding for SSO AuthnRequests, or at least change the preferred order so that Redirect is default (my ultimate goal)?
U1404
closed

Answers

By Aliaksandr Samuseu staff 15 Jun 2016 at 6:28 a.m. CDT

Copy
Aliaksandr Samuseu gravatar
Hi, Martin. You shouldn't do it with direct edits, generally, it's better to use web UI when possible. But if you really must: try to edit `/opt/tomcat/conf/shibboleth2/idp/idp-metadata.xml.vm`, this is the template from which final file should be generated. You need to be familiar with Apache Velocity templates, of course.

By Martin user 15 Jun 2016 at 6:40 a.m. CDT

Copy
Martin gravatar
I would love to handle this in the UI, but I couldn't for the life of me find the right place. I will look into the .vm file and see if I can find my way around. update: Editing idp-metadata.xml.vm solved my problem, curious if this was available in UI as well? Thx!

Post an answer