ページ履歴

    (省略)

         <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                   checkAddress="false" handlerSSL="false" cookieProps="http">

             <!--
             Configures SSO for a default IdP. To allow for >1 IdP, remove
             entityID property and adjust discoveryURL to point to discovery service.
             (Set discoveryProtocol to "WAYF" for legacy Shibboleth WAYF support.)
             You can also override entityID on /Login query string, or in RequestMap/htaccess.
             -->

            <SSO entityID="https://test-idp1.gakunin.nii.ac.jp/idp/shibboleth"
                                      ↑IdPを設定（metadataに設定されているentityID） 
                 discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
              SAML2 SAML1
            </SSO>

   (省略)

            <!-- Session diagnostic service. -->
            <Handler type="Session" Location="/Session" showAttributeValues="false"/>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
            <SessionInitiator type="Chaining" Location="/DS" isDefault="false" id="DS">
                                                                         ↑DSの参照設定をtrue → falseに変更
                 <SessionInitiator type="SAML2" template="bindingTemplate.html"/>
                 <SessionInitiator type="Shib1"/>
                 <SessionInitiator type="SAMLDS" URL="https://test-ds.gakunin.nii.ac.jp/WAYF"/>
             </SessionInitiator>
        </Sessions>

   (省略)

    （省略）

    <!-- ========================================== -->
    <!--      Metadata Configuration                -->
    <!-- ========================================== -->
    <!-- MetadataProvider the combining other MetadataProviders -->
    <metadata:MetadataProvider id="ShibbolethMetadata" xsi:type="metadata:ChainingMetadataProvider">

        <!-- Load the IdP's own metadata.  This is necessary for artifact support. -->
        <!-- コメント解除 -->
        <metadata:MetadataProvider id="IdPMD"

xsi:type="metadata:ResourceBackedMetadataProvider">


            <metadata:MetadataResource

xsi:type="resource:FilesystemResource"

file="/opt/shibboleth-idp/metadata/メタデータファイル名"/>


        </metadata:MetadataProvider>
        <!-- コメント解除 -->

        <!-- Example metadata provider. -->
        <!-- Reads metadata from a URL and store a backup copy on the file system. -->
        <!-- Validates the signature of the metadata and filters out all by SP entities in order to save memory -->
        <!-- To use: fill in 'metadataURL' and 'backingFile' properties on MetadataResource element -->
        <!-- コメントアウト
        <metadata:MetadataProvider id="URLMD" xsi:type="metadata:FileBackedHTTPMetadataProvider"


                          metadataURL="https://metadata.gakunin.nii.ac.jp/gakunin-metadata.xml"


                          backingFile="/opt/shibboleth-idp/metadata/some-metadata.xml">


            <metadata:MetadataFilter

xsi:type="metadata:ChainingFilter">


                <metadata:MetadataFilter

xsi:type="metadata:RequiredValidUntil"


                                maxValidityInterval="P15D"

/>
                <metadata:MetadataFilter

xsi:type="metadata:SignatureValidation"


                                trustEngineRef="shibboleth.MetadataTrustEngine"


                                requireSignedMetadata="true"

/>
                    <metadata:MetadataFilter

xsi:type="metadata:EntityRoleWhiteList">


                    <metadata:RetainedRole>samlmd:

SPSSODescriptor</metadata:RetainedRole>


                </metadata:MetadataFilter>


            </metadata:MetadataFilter>


        </metadata:MetadataProvider>


        コメントアウト -->



    </metadata:MetadataProvider>

    （省略）