ADFS Assertion Consumer Service error

Brian Fox dexwest at gmail.com
Mon May 7 16:47:47 BST 2012


I am trying to integrate my Shibboleth SP with a ADFS site (as iDP).  
After the user logins into AD site we see the following error:

The request specified an Assertion Consumer Service URL 'https://adfstest.com/sso/SAML2/POST' that is not  configured on the relying party 'microsoft:identityserver:MYSP_ENTITYID'.

Based on my metadata my ACS endpoint is configured to:
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mysite.com/sso/SAML2/POST"  index="0"/>

The ADFS system seems to be replacing my hostname with the ADFS server hostname.  Any ideas how I can solve this?

I have been following the following howto:


  AD FS 2.0 Step-by-Step Guide: Federation with Shibboleth 2 and the
  InCommon Federation

  http://technet.microsoft.com/en-us/library/gg317734(WS.10).aspx  <http://technet.microsoft.com/en-us/library/gg317734%28WS.10%29.aspx>

Shibboleth version 2.4.3
ADFS Windows Server 2008 R3

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120507/1b28e12a/attachment.html 


More information about the users mailing list