Shibboleth SP Setup with IIS 6
Today I setup my first IIS 6 web server with a Shibboleth SP . Now I have setup many instances of the Shibboleth SP in the Apache HTTP server and have had hardly any issues at all. This is not the case with IIS. The installation and setup of the filter in the Web Server went very smoothly. All of my issues came when configuring the shibboleth2.xml file.
What I discovered as my main issue was that IIS 6 seems to convert all url requests to be all lowercase. The information I was given by my client was mixed case. This created a issue where the http://localhost/Shibboleth.sso/Status page was showing that Shibboleth was setup correctly but the pages were not being secured correctly. To fix my issue I changed all mixed case domain names like Sp.Example.org to sp.example.org for both the ISAPI Site name and the Request Mapper Host name.
After I did that everything was working correctly. So if you are having issues with your site security working with Shibboleth and IIS then you might want to check the domain name entries. It appears that IIS is very sensitive to case sensitivity.



