Wrong ACS URL

[Cantor, Scott]

On 9/14/12 7:46 PM, "Vishal K. Gandhi" <vgandhi at fdu.edu> wrote:
>
>The problem I think is SP expecting assertion at URL
>https://test-server.fdu.edu:443/Shibboleth.sso/SAML2/POST, but in
>reality I think that should go to
>https://test-server.fdu.edu/Shibboleth.sso/SAML2/POST (Same url but
>without port 443)

The rules aren't spelled out very well but the conventional interpretation
is that implementations aren't expected to have to canonicalize URLs for
comparison, and URLs in messages and metadata shouldn't carry default
ports.

The SP doesn't generate redirect URLs with default ports like that unless
its normal mechanics are overridden.

>I'd appreciate if I get some guidance over this.

I don't really have any. The only thing that I can think of that would
cause it to combine https with port 443 is if handlerURL is set to an
absolute URL.

-- Scott