Pls help me: No peer endpoint available to which to send SAML response

[Paul Hethmon]

Your service provider is not sending an ACS value that matches what you are loading for it. So look at your SP configuration and the metadata your IdP loads for that SP. One of them is wrong, one of them is right. You'll have to figure out which is wrong.

Paul


From: hao liu <Hao.Liu at astro.cf.ac.uk<mailto:Hao.Liu at astro.cf.ac.uk>>
Reply-To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Thursday, April 19, 2012 12:33 PM
To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Pls help me: No peer endpoint available to which to send SAML response

Hi all,

I am deploying shibboleth on Mac. I am new to this area. After encountered many installation errors, I got stuck on "No peer endpoint available to which to send SAML response". I have checked many related threads online but none of them solved my problem.

The idp-process.log says:
17:02:09.991 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'https://vdbmac.astro.cf.ac.uk/shibboleth' requested the response to be returned to endpoint with ACS URL 'https://www.example.com/Shibboleth.sso/SAML2/POST'  and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding,  can be found in the relying party's metadata
17:02:09.991 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429] - No return endpoint available for relying party https://vdbmac.astro.cf.ac.uk/shibboleth

I think I have setup correctly AssertionConsumerService in metadata, and also shibboleth2.xml. Here i attach the two files.


Please help me out. Thanks!

Regards,
Hao
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120419/f71e3b2f/attachment.html