ADFS Assertion Consumer Service error
Brian Fox
dexwest at gmail.com
Mon May 7 16:47:47 BST 2012
I am trying to integrate my Shibboleth SP with a ADFS site (as iDP).
After the user logins into AD site we see the following error:
The request specified an Assertion Consumer Service URL 'https://adfstest.com/sso/SAML2/POST' that is not configured on the relying party 'microsoft:identityserver:MYSP_ENTITYID'.
Based on my metadata my ACS endpoint is configured to:
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mysite.com/sso/SAML2/POST" index="0"/>
The ADFS system seems to be replacing my hostname with the ADFS server hostname. Any ideas how I can solve this?
I have been following the following howto:
AD FS 2.0 Step-by-Step Guide: Federation with Shibboleth 2 and the
InCommon Federation
http://technet.microsoft.com/en-us/library/gg317734(WS.10).aspx <http://technet.microsoft.com/en-us/library/gg317734%28WS.10%29.aspx>
Shibboleth version 2.4.3
ADFS Windows Server 2008 R3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120507/1b28e12a/attachment.html
More information about the users
mailing list