ADFS Assertion Consumer Service error

[Cantor, Scott]

On 5/7/12 12:22 PM, "Brian Fox" <dexwest at gmail.com> wrote:
>
>When in SAML tracer the AuthnRequest has:
><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>                  
>AssertionConsumerServiceURL="https://adfstest.com/sso/SAML2/POST"

That's not a valid ACS as generated by an SP unless you've messed with SP
settings you shouldn't be touching.

>So both AssertionConsumerServiceURL and Destination are pointed to the
>ADFS site and not my shibboleth site (which is the SP).  The saml:Issuer
>does seem to be my site.
>
>Does that mean my SP is configured incorrectly or is it the ADFS site?

Your SP's handlerURL is borked, and if the hostname is also wrong, then
your web server or ISAPI Site mappings in the SP are misconfigured.

-- Scott