fkooman

Probably webserver is not running on port 443.

Also, you are using IP addresses? Why not a (local) hostname? That works better I guess...

Personally I'm not interested in Heroku, maybe you can contribute an `app.json`?

Actually, it doesn't need to be part of the library, the library consumer can (easily) do this by extracting the 'identifier' part of the OTP provided by the YubiKey, it...

I'm using this for my RPM package(s) which can be found on [COPR](https://copr.fedorainfracloud.org/coprs/fkooman/openvpn/), a repo for RHEL and Fedora. The spec and SRPM files can be found [here](https://fkooman.fedorapeople.org/openvpn-plugin-auth-script/).

In `/etc/shibboleth/attribute-map.xml`: ``` ``` Make sure that your IdP provides one of these `urn` attributes to Shibboleth SP in that exact way. Otherwise you might have to update the mapping...

I'm not sure, am not that familiar with Shibboleth. Perhaps you can use tooling like [saml-tracer](https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/) to see what actually gets sent to the SP and go from there?

> Thanks for the link. I just tried the tool on eduvpn and on a SP that works. On both it shows information that isn't quite useful for me concerning...

This seems more like a Shib issue, and not eduVPN, so perhaps it is better to request help @ the Shibboleth community?