mismatch in ACS URL - port included in SP request to IdP

[Kohlhaas, James]

I receive "No peer endpoint available to which to send SAML response" after authenticating with the Idp and redirecting back to my site.  I looked into the IdP logs and noticed that there is indeed a mismatch for the ACS URL - specifically, the port is omitted in the SP metadata but included in the request from the SP.

The request from the SP asks to be sent back to the Assertion Consumer Service endpoint at https://mysite:443/Shibboleth.sso/SAML2/POST for urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST .

In the SP metadata file, the ACS endpoint for urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST is https://mysite/Shibboleth.sso/SAML2/POST.

The SP is 2.5 and configured using IIS 7. I am using the standard 443 port with HTTPS for mysite.  The only references to the port are in the ISAPI and RequestMapper sections of the shibboleth2 configuration:
<InProcess logger="native.logger">
<ISAPI normalizeRequest="true" safeHeaderNames="true">
<Site id="2" name="mysite" scheme="https" port="443"/>
</ISAPI>
</InProcess>

<RequestMapper type="Native">
<RequestMap>
<Host name="mysite" scheme="https" port="443">
<Path name="Web.External" authType="shibboleth" requireSession="false"/>
</Host>
</RequestMap>
</RequestMapper>

The port is not defined in the entityID:
<ApplicationDefaults REMOTE_USER="eppn persistent-id targeted-id" entityID="https://mysite/shibboleth">
<Sessions handlerSSL="true" relayState="ss:mem" checkAddress="false" timeout="3600" lifetime="28800" cookieProps="https">

I removed the scheme="https" and port="443" attributes from these in hopes that it would remove the port reference from the request.  However, the port is still included in the request from the SP.

Is it possible to make a modification so that the endpoint requested for our response to be sent to does not include :443?

Thanks,

James Kohlhaas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121031/8bb3f629/attachment-0001.html