Problems getting a new Idp talking to testshib

[Cantor, Scott]

On 5/24/12 9:53 PM, "Brad Larson" <bklarson at gmail.com> wrote:
>
>Using Live Headers I see the original request with the query
>parameter. This gets redirected to /idp/AuthEngine.  Then it gets
>redirected to /idp/Authn/RemoteUser.  Then back to
>/idp/profile/SAML2/Redirect/SSO (with no query parameter).

I believe that's the regression in 2.3.6 that doesn't handle errors coming
back from the authentication step properly, so it repeats the original
profile handler and without the parameters you get that error. Normally
you'd get an error back to the SP because the authentication wasn't
configured.

>  I thought
>I was following the wiki correctly, and that I could use testshib
>without setting up an authentication mechanism, but maybe I was
>mistaken or missed a step.

You're mistaken, you can't deploy an IdP without an authentication
mechanism.

-- Scott