You are located in service: Identity Management

Switching the Shibboleth Identity Provider to Dual Stack

Switching the Shibboleth Identity Provider to Dual Stack

Kurzinformation

On 30.09.2020, the Shibboleth Identity Provider operated by the IT Center, which is necessary for the use of the RWTH SIngle Sign-On service, will be switched to dual stack mode. In dual stack mode the Shibboleth Identity Provider has an IPv4 and an IPv6 address. To avoid problems with the connected services during this changeover, every service provider must make the following changeover in the shibboleth2.xml by 29.09.2020:

In the session node the attribute checkAddress must be set to false:

<Sessions lifetime="28800" timeout="3600" relayState="ss:mem" checkAddress="false" handlerSSL="true" cookieProps="https"

By default, this attribute is set to true and must therefore be changed. Details about this attribute can be found in the official Shibboleth documentation: https://wiki.shibboleth.net/confluence/display/SP3/Sessions

The shibd daemon must then be restarted.

last changed on 01/29/2021

How did this content help you?

Creative Commons Lizenzvertrag
This work is licensed under a Creative Commons Attribution - Share Alike 3.0 Germany License