This is a list of tips for configuring Shibbleth SP to play well with other things (or, configuring it to gracefully handle other things that don't play well with others, as the case may be). Some of these things may need to be their own pages at some point.
Opening links by clicking them in a Word document often leads to a Shibboleth error due to the the odd way Word handles
links. The fix is to force your SP to use the POST binding instead of the redirect binding. The default
<SSO> element can be
modified with the
outgoingBindings attribute to accomplish this:
<SSO entityID="https://idp.example.org/idp/shibboleth" outgoingBindings="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"> SAML2 SAML1 </SSO>
Original credit for this fix goes to:
However, that document uses the (mostly outdated) SessionInitiator element to change the binding. That page is also the place to
look for more background on this problem.