Configure ISAPI and CGI Restrictions, ISAPI Filter, and Handler Mapping

Installing Windchill Risk and Reliability > Enterprise Edition > Configuring Windchill Risk and Reliability for Single Sign-on > Configure Internet Information Services (IIS) > Configure ISAPI and CGI Restrictions, ISAPI Filter, and Handler Mapping

To configure ISAPI and CGI Restrictions, ISAPI Filter, and Handler Mapping, complete the following steps:

1. To open the IIS Manager, go to Start > Administrative Tools > Internet Information Service (IIS) Manager.

2. Double-click the ISAPI and CGI Restrictions.

3. In the Actions panel of the ISAPI and CGI Restriction pane, click Add….

a. In the Edit ISAPI and CGI Restriction dialog box, in the ISAPI or CGI path field, browse for the <shibboleth_install_directory>\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll.

b. In the Description field, enter Shibboleth.

c. Select the Allow extension path to execute check box and click OK.

Similarly, add an entry for the 64-bit isapi_shib.dll as follows:

a. In the ISAPI or CGI path field, browse for the <shibboleth_install_directory>\opt\shibboleth-sp\lib64\shibboleth\isapi_shib.dll.

b. In the Description field, enter Shibboleth Web Service Extension.

c. Select the Allow extension path to execute check box and click OK.

4. In the IIS Manager window, double-click ISAPI Filters.

5. In the Actions panel of the ISAPI Filters pane, click Add….

a. In the Edit ISAPI Filters dialog box, in the Filter name field, enter Shibboleth.

b. In the Executable field, enter <shibboleth_install_directory>\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll and click OK.

c. In the Name field, enter Shibboleth and click OK.

6. In the IIS Manager window, double-click Handler Mapping to configure the SSO file extension mapping.

7. In the Actions panel of the Handler Mapping pane, click Add Script Map….

a. In the Edit ISAPI Filters dialog box, in the Request Path field, enter *.sso.

b. In the Executable field, enter <shibboleth_install_directory>\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll.

c. In the Name field, enter Shibboleth and click OK.

There may be two entries in Handler mappings (one for the 64-bit isapi_shib.dll path of and for the 32-bit isapi_shib.dll path).

8. Restart the Internet Information Services.

To check the Shibboleth configuration status in IIS, enter the following URL in the address bar of your web browser:

http://127.0.0.1/Shibboleth.sso/Status.

If the browser displays an XML document, the Shibboleth installation in Windows IIS in complete.