Shibboleth Developers

["Scott Cantor" <>]

> I am trying to use the SSL certificate that is installed on 
> Load balancer(Big IP), instead of installing it on all the 
> (windows 2000) Target Servers..
> 
> Any information on Whether Shibboleth will work this way? if 
> so please provide me information on how to configure 
> Shibboleth to use Loadbalncer SSL certificate?

If you're talking about the use of SSL between the service and the browser, 
you can do whatever you want. You may need to use some
more advanced configuration features to control redirect behavior depending 
on the web server and the configuration, but it will
work.

The software still requires its own certificate for client TLS. You can 
probably use the same key and certificate as the balancer,
unless it prevents access to the key. But the key will have to be in a file 
on the web server regardless.

-- Scott