test of idP to idP using testshib.org

[Peter Schober]

* Bo Lorentsen <bl at moch.dk> [2012-09-18 15:24]:
> I have added the testshib.org to my relay-party.xml file as described at 
> the test site, and uploaded the idp-metadata.xml to the test system, but 
> I end up here. I expected my idP to relay my auth request to the test 
> server, but that seems not to happend. Are there some routing info I 
> need to add, that I have not configured properly, yet ?
> 
> I tried to look for help in both the wiki and on Google, but I did not 
> find anything useful, or maybe I don't know what to expect of the 
> testshib.org.
> 
> Am I right to expect testshib.org to provide the authentication (in this 
> simple setup), or will it simply send my request back to my own server 
> and then expect this server to provide the authentication (if that is 
> the case, the error is understandable).

No. If you're running the IdP all testshib cuold provide you with is a
SAML SP. Since you already have set up your own SP you could either
forget about testshib and configure the IdP and SP per the
documentation or use the testshib SP with your local IdP.
>From the error message from your SP

00:44:52.358 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429]
- No return endpoint available for relying party https://idp.moch.dk/idp/shibboleth

That just means what it says: your SP does not yet know your IdP.
So configure the SP according to
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted
Step "Supply or link to at least one IdP's metadata using one or more
<MetadataProvider> elements".
-peter