Rundeck + mod_auth_mellon httpd reverse proxy for SAML

gistfile1.txt

Searches that helped me fix the config
Redirect loop: https://www.puppeteers.net/blog/solving-an-apache-mellon-redirect-loop-mystery/
400 Bad Response error: https://jdennis.fedorapeople.org/doc/mellon-user-guide/mellon_user_guide.html#invalid_destination

Okta app config notes
* SAML Recipient should be https://<server_url>/<MellonEndpointPath>/postResponse
* SAML Audience should be https://<server_url>/<MellonEndpointPath>

Apache config notes
* ServerName must match the SAML Recipient, including the HTTP/HTTPS

mod_auth_mellon config notes
* If changing <MellonEndpointPath> from default, the metadata must be regenerated because the endpoints need to match the internal filter
** See https://jdennis.fedorapeople.org/doc/mellon-user-guide/mellon_user_guide.html#metadata_creation

Rundeck preauthorized mode config notes