InCommon Library Services

[Dean Woodbeck <>]

A second post from today.

Dean


----- Forwarded Message -----
From: "Peter Schober" <>
To: 
Sent: Wednesday, June 17, 2009 5:51:59 AM GMT -05:00 US/Canada Eastern
Subject: Re: [Shib-Users] Ezproxy config for local IDP

* Franck Borel <> [2009-06-17 09:19]:
> I just upgrade our EZProxy to let him speak SAML 2. Here is an
> example how you should configure your EZProxy:
[...]

If you're using federation supplied metadata (describing the IdPs that
you work with) be sure to check the metadata against a signing public
key, as mentioned in the docs:

# http://www.oclc.org/us/en/support/documentation/ezproxy/usr/shibboleth.htm
ShibbolethMetadata \
   -EntityID=http://ezproxy.example.edu/saml2 \
   -File=federation-metadata.xml \
   -Cert=1 \
   -URL=https://federation.example.org/federation-metadata.xml \
   -URLValidate=federation-metadata-signing.crt

> Here is an example for the metadata of the EZProxy:

EZproxy generates it's own metadata from the admin screen ("Manage
Shibboleth"), you just need to add the entityId for ezproxy to that
XML file, as per the docs.
-peter