pushing an unsolicited response to an artifact endpoint

[Cantor, Scott]

On 12/7/11 2:16 PM, "Tom Scavo" <trscavo at gmail.com> wrote:

>I'm trying to use the Shib2 unsolicited SSO feature with the artifact
>binding. Has anyone used these two together successfully?

If you manage to get the IdP to actually use artifact, then the rest is
pretty much same as any other, how it starts doesn't matter.

>In all of the cases I've tried, I get the following error message (in
>the browser window):
>
>opensaml::BindingException at
>(https://service1.internet2.edu/Shibboleth.sso/SAML2/Artifact)
>Unable to resolve artifact(s) into a SAML response.

There'd have to something in one or both logs indicating what the actual
error is. Possible issue could simply be a lack of service endpoints in
the IdP metadata for resolving artifacts. With no request from the SP, it
never has a chance to notice that and block the request from using
artifacts.

-- Scott