SAML ACS URL behind IIS reverse proxy

PowerShell Universal
1 
Product: PowerShell Universal
Version: 3.4.3

I’m trying to set up PowerShell Universal with SAML authentication. Since I need SSL/TLS, I’m running it behind an IIS reverse proxy. The SAML request being generated uses http://psu.domain.com:5000 as the site URL and I can’t figure out how to make it use https://psu.domain.com. I can get it working running PSU in IIS, but I’ve gotten the impression that environment is more difficult to troubleshoot when problems arise. Should I stick with the reverse proxy? If so, how do I tell PSU what URL it should be using?

-Robert

1 Like
2

is it at the root of iis or is it in an application in a sub site?

3

It’s the root and the only thing this server does. I’m setting X-Forwarded-Host, X-Forwarded-Proto, and X-Forwarded-Port in IIS as well.

-Robert

4

when i was testing reverse proxy, it seemed to like https on port 5433 setup. appsettings.json is where you add in your 5443 port and hook it into your cert. i do not have any experience yet with the SAML, i did see someone put multi-auth on on of their sites and use Okta authen tokens.