unable to locate metadata for identity provider
Pavan K
pavanonnet1986 at gmail.com
Wed Aug 31 00:24:53 BST 2011
Hi All,
I am trying to integrate Shibbleth SP with IDP. I configured the Service
provider for apache by following the instructions given in shibboleth home
page.
Here is what I did:
My identity provider "entityId" is :
*http://<machineA>:8080/idp/shibboleth*and the metadata is accesible
by using that URL.
After installing the Service provider, I modified "shibboleth2.xml" with the
following changes,
Modified service provider "entityId" to
*"http://<machineB>/sp/shibboleth"*in "<ApplicationDefaults" xml tag.
Added SSO:
*<SSO entityID="http://<machineA>:8080/idp/shibboleth">
SAML2 SAML1
</SSO>
*Added metadata provider:
* <MetadataProvider type="Chaining">
<MetadataProvider type="XML" uri="http://
<machineA>:8080/idp/shibboleth"
backingFilePath="federation-metadata.xml"
reloadInterval="7200">
<MetadataFilter type="RequireValidUntil"
maxValidityInterval="2419200"/>
</MetadataProvider>
</MetadataProvider>
*And i modified identity provider "relying-party.xml" file with the
following changes,
* <rp:AnonymousRelyingParty provider="http://<machineB>/sp/shibboleth"
defaultSigningCredentialRef="IdPCredential"/>
<rp:DefaultRelyingParty provider="http://<machineB>/sp/shibboleth"
defaultSigningCredentialRef="IdPCredential">
*
After these changes i have restarted identity provider, services provider
and apache services. I am trying to hit the url; *"http://
<machineB>/Shibboleth.sso/Login"*
I am getting the following error:
*opensaml::saml2md::MetadataException at (http://
<machineB>/Shibboleth.sso/Login)*
*Unable to locate metadata for identity provider (http://
<machineA>:8080/idp/shibboleth)*
I did not get solution for this problem. I am i missing any configuration
here? Please help me to resolve this issue.
Thanks in Advance,
-Pavan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110830/d58dfe19/attachment-0001.html
More information about the users
mailing list