<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:10pt"><div>Hi,</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">I have an IDP that uses grails and OpenSaml. When the Authentication Request has a destination attribute, the validation of the request fails. An exception is thrown by checkEndpointURI(SAMLMessageContext messageContext) of BaseSAMLMessageDecoder.</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">decoding.BaseSAMLMessageDecoder <br>SAML message intended destination endpoint
'http://localhost:8080/myIdp/SPInitRedirect/receiveSSORequest/940iuuikfpkqru5l' did not match the recipient endpoint 'http://localhost:8080/myIdp/grails/SPInitRedirect/receiveSSORequest.dispatch'<br>SAML message intended destination endpoint did not match recipient endpoint</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">where SPInitRedirect is Controller<br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span class="tab"> </span><span class="tab"> </span>receiveSSORequest is Action</div><div style="color: rgb(0, 0, 0); font-size:
13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span class="tab"> </span>940iuuikfpkqru5l is Id<br><span class="tab"> <br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span class="tab">When the checkEndpointURI does a httpRequest.getRequestURL(), the url returned has /grails and .dispatch and the id is not there. That is how the grails request URL looks like.</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br><span class="tab"></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span
class="tab">So the validation of the request fails<br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">I know this is more of grails question, but I wanted to check if anyone on this forum has seen this issue and has a solution for this.</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent;
font-style: normal;">Thanks,</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">-Mitu</div></div></body></html>