StatusResponseType must have Status. / xmltooling::ValidationException at (https://idefix.worldtalk.de/sp/Shibboleth.sso/SAML2/POST)

[Cantor, Scott]

> What I wonder is.... Does the IdP really need the metadata and relying
> party defintion for handling this kind of request?

No. It needs *metadata*, period.

> it knows the Profile Binding to be used for receiption (from it's own
> metadata, as defined in C:/opt/shibboleth-idp/metadata/idp-metadata.xml):

No. That is the IdP's metadata, not the SP's. It has nothing to do with the IdP processing the request.

> So the question is, weather I should (or better: need) to change
> something in the relying-party.xml at all.

Other than adding metadata sources, no, not in general.

> The problem: When I comment out everything I added to the
> relying-party.xml I'm getting the error message:

Because you're telling it not to support any profiles.

> But later there's those warnings:

Because you have no metadata supplied.
 
> This at least states, that the IdP wants the access the service
> provider's metadata. The only way to give it that metadata reference was
> for me to add the definitions in relying-party.xml.

Adding metadata, yes. That is not the same as adding "definitions".

> Just adding the Service Provider Metadata-Definition to the
> idp-metadata.xml doesn't work,

You do not add metadata like that. You need to define additional sources of metadata for the SP(s) to support.

> Ok, the test result is that the IdP implementation doesn't seem to
> support the <EntitiesDescriptor>-Tag; at least it doesn't like the new
> XML structure.

Your XML was just wrong.

When you want to support an SP, you need a source of metadata. How you do that is up to you, but that's it, there's nothing else you need to touch apart from probably the attribute filter.

Normally for testing you package the metadata into a file, and add it as a file source in relying-party.xml in the metadata chain. For more practical handling, you create a local file for all such SPs, and wrap all their metadata into an EntitiesDescriptor. That is NOT at all related to the idp-metadata.xml file.

-- Scott