Shibboleth SP with Novell NAM IDP

[Peter Schober]

* EMP <emp618 at internode.on.net> [2012-09-24 13:12]:
> When I access the /secure URL I get an error - None of the configured 
> SessionInitiators handled the request error and the shibd.log shows the 
> following
> 
> dispatching message (default/Login::run::SAML2SI)
> 2012-09-24 20:40:50 INFO Shibboleth.SessionInitiator.SAML2 [1]: unable 
> to locate SAML 2.0 identity provider role for provider 
> (https://idp.xxx.com/nidp/saml/metadata)
> 
> The Metadata is loaded fine in the shib.log.
> 
> Leads me to believe the IDP Metadata is screwy

There are a few strange things there, e.g. it does not list SAML2 in
protocolSupportEnumeration (neither for the IDP nor AA or SP role) but
only lists SAML2 protocol endpoints within these roles.
-peter