SP: no endpoint

[James Bardin]

On Fri, Jul 29, 2011 at 12:19 PM, Cantor, Scott E. <cantor.2 at osu.edu> wrote:
>
> The Shibboleth SP does not in general specify a location, it generates a
> self-referential URL, which on Apache is handled in the same way it's
> supposed to be for any Apache module. IIS's original API does not support
> self-referential URLs (and thus it does not actually support vhosting), so
> the SP handles it via its own configuration.
>

True, but I've run into some non-shibboleth SP's (though, I now see
the OP's *is* shibboleth) that try to send various ACS urls that
weren't specified ahead of time. Shibboleth rightly rejects these (I
guess you *could* choose to trust them if the request was signed
though).

Also, testshib does set this attribute ;)
AssertionConsumerServiceURL="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"

-jim