dissociate displayed URL from entityID ?

Rayene Ben Rayana rayene.benrayana at gmail.com
Wed Oct 12 15:40:23 BST 2011


You're right,

I just figured out the problem. I was declaring to the community an absolute
AssertionConsumerService location that starts with my entityID's domain name
(https://mycompany.net/SAML2/POST).
The community declaration web form does not seem to accept relative urls so
I had to change it to https://something.local/SAML2/POST and it seems to
work now :)

Thank you very much for your help !



On Wed, Oct 12, 2011 at 3:53 PM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Rayene Ben Rayana <rayene.benrayana at gmail.com> [2011-10-12 15:47]:
> > In the web browser, when I do not use the url declared as entityID
>
> You never "use" an entityID. You set it in the software and
> communicate metadata that contains this. It's a name, nothing else.
> You can easily seet his when you change your entityID to a URN, since
> these do not "resolve" to anything (without special systems).
>
> > I am
> > able to :
> > - access the DS page
> > - select an IdP
> > - access the IdP page and fill credentials.
> > But, when I submit, I get the following error :
> >
> > *Error Message: Invalid IdP URL (HTTP 404)*
>
> What does "access the DS page" mean, specifically? You'll need to
> access a SAML service provider, which in turn may redirect you to a
> DS, which (with SAML2) will redirect you back to the SP, which in turn
> will issue a SAML authentication request to the IdP, which then might
> ask you to authenticate and will then send you off the SP with a SAML
> protocol message.
> So without an SP there's no authentication request and there's nothing
> for the IdP to do after authentication.
>
> But none of this should have anything to do with the content of the
> string of the entityIDs used.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111012/cfa411c2/attachment-0001.html 


More information about the users mailing list