Endpoint with Location 'https://FQDN/path/Shibboleth.sso/...' discarded because neither its Location nor ResponseLocation match ACS URL 'https://FQDN/Shibboleth.sso/...'

[Cantor, Scott]

> NOTE: My first try didn't work, as I forgot the namespace-definition
> inside <EntitiesDescriptor> (just left it in <EntityDescriptor> of the
> IdP). This resulted in an error message about "No unmarshaller
> registered for document element  EntitiesDescriptor". Suggestion: Maybe
> it's useful to give the user some hint, that he/she has possibly not
> defined the namespace correctly. The "unmarshaller"-error just sounds
> like "Software can't handle the tag, we'll implement that in future"

Or you can schema validate the XML.

> Suggestion: As it seems to be a common error too (e.g.
> https://lists.internet2.edu/sympa/arc/shibboleth-users/2010-
> 12/msg00103.html),
> it may be worth adding an INFO-Level message stating something like:
> 
>  >> INFO ...... : Credentials found for use="signing", not using them as
> use="encryption" is required.

That's not possible, since the credential lookup code doesn't even see descriptors for a non-relevant purpose.

However, we have wiki pages containing troubleshooting information that anybody can add to describing error conditions and solutions.

-- Scott