1. entityID Setting
Edit /etc/shibboleth/shibboleth2.xml as follows.
Search and detect [ApplicationDefaults entityID] <ApplicationDefaults entityID="https://sp.example.asia/shibboleth"
↑Hostname of the SP REMOTE_USER="eppn persistent-id targeted-id">
2. IdP Setting
Search and detect [SSO entityID] <SSO entityID="https://idp.example.asia/idp/shibboleth"
↑Hostname of the IdP discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
SAML2 SAML1
</SSO>
3. Metadata Setting
Setup for metadata automatic download.
Modify /etc/shibboleth/shibboleth2.xml as follows.
<!-- Example of remotely supplied batch of signed metadata. -->
←Add comment end
<!-- --> <MetadataProvider type="XML" uri="http://idp.example.asia/metadata/idp-metadata.xml"
↑URL of IdP metadata
backingFilePath="idp-example-asia-metadata.xml" reloadInterval="7200">
↑backup file name of IdP metadata
← Add comment start
<!-- <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200 "/>
<MetadataFilter type="Signature" certificate="fedsigner.pem"/>
-->
← Add comment end </MetadataProvider>
<!-- -->
← Add comment start
Downloaded IdP metadata is stored as /var/cache/shibboleth/idp-metadata.xml
Reference
Shibboleth SP 2.x Documents
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReloadableXMLFile
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataProvider