Pls help me: No peer endpoint available to which to send SAML response

[Mat Houser]

By the way a really easy way to get this particular error without having
anything misconfigured is if you try going to the protected resource on
your SP by a different protocol than your SP EntityID is in metadata on
the IdP.

For example, http://your.sp.blah/secure when your EntityID for your sp
is https://your.sp.blah....

-mat

-- 
---------------------------------------------
| Mat Houser
| University Information Technology Services
| UW-Milwaukee
---------------------------------------------

On Thu, 19 Apr 2012, Hao Liu wrote:

hi Paul,

Thanks for you reply. I am sorry could you tell me more details about what I should look for? about sp configuration you mean shibboleth2.xml right?

Hao


On 19 Apr 2012, at 18:02, Paul Hethmon wrote:

> Your service provider is not sending an ACS value that matches what you are loading for it. So look at your SP configuration and the metadata your IdP loads for that SP. One of them is wrong, one of them is right. You'll have to figure out which is wrong.
> 
> Paul
> 
> 
> From: hao liu <Hao.Liu at astro.cf.ac.uk>
> Reply-To: Shibboleth Users <users at shibboleth.net>
> Date: Thursday, April 19, 2012 12:33 PM
> To: Shibboleth Users <users at shibboleth.net>
> Subject: Pls help me: No peer endpoint available to which to send SAML response
> 
> Hi all,
> 
> I am deploying shibboleth on Mac. I am new to this area. After encountered many installation errors, I got stuck on "No peer endpoint available to which to send SAML response". I have checked many related threads online but none of them solved my problem. 
> 
> The idp-process.log says:
> 17:02:09.991 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'https://vdbmac.astro.cf.ac.uk/shibboleth' requested the response to be returned to endpoint with ACS URL 'https://www.example.com/Shibboleth.sso/SAML2/POST'  and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding,  can be found in the relying party's metadata 
> 17:02:09.991 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429] - No return endpoint available for relying party https://vdbmac.astro.cf.ac.uk/shibboleth
> 
> I think I have setup correctly AssertionConsumerService in metadata, and also shibboleth2.xml. Here i attach the two files. 
> 
> 
> Please help me out. Thanks!
> 
> Regards,
> Hao
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net