Shibboleth SP with IIS does not work

[Alex Zharkov]

Best of the day Atlassian Community,

I hope you will be able to help me.

We are trying to enable SSO with one of our web application, so users will be allowed to access the app only if they are logged in with Company's Ping Identity SSO. The web app is installed on Windows IIS server. I tried to install Shibboleth SP and followed the instruction but unfortunately had no luck. 

After installing Shibboleth SP it passes the preliminary tests successfully:

• %SHIBSP_PREFIX%/sbin/shibd.exe -check - passes, no fatal errors, config is loadable
• https://localhost/Shibboleth.sso/Status - also works fine, showing the default .xml file, status "OK"

ISAPI filter and Handler Mapping seem to be configured correctly.

After shibboleth2.xml configuration and multiple reconfiguration I still cannot download Metadata file. When I try to access https://<site_name>/Shibboleth.sso/Metadata I see Error page. I think this is something to do with shibboleth.xml configuration, probably in particular <ApplicationDefaults tag. Happy to provide the details.

Thank you in advance.

Alex.