Relying Party

[Stein, Eric]

Brent, Douglas,
  Thanks for helping out!

I think that using https is the right way to go. Where do I set that, though? Is that in the metadata, or shibboleth2.xml, or ?

Thanks,
Eric Stein

In my SP metadata I have:

   <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://my.shib.server.com/Shibboleth.sso/Artifact/SOAP" index="1"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://my.shib.server.com/Shibboleth.sso/SLO/SOAP"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://my.shib.server.com/Shibboleth.sso/SLO/Redirect"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://my.shib.server.com/Shibboleth.sso/SLO/POST"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://my.shib.server.com/Shibboleth.sso/SLO/Artifact"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://my.shib.server.com/Shibboleth.sso/SAML2/POST" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://my.shib.server.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://my.shib.server.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://my.shib.server.com/Shibboleth.sso/SAML2/ECP" index="4"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://my.shib.server.com/Shibboleth.sso/SAML/POST" index="5"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://my.shib.server.com/Shibboleth.sso/SAML/Artifact" index="6"/>

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
Sent: Wednesday, April 03, 2013 4:05 PM
To: users at shibboleth.net
Subject: Re: Relying Party



On 4/3/2013 2:23 PM, Stein, Eric wrote:
> I'm having issues with my relying-party configuration, and I'm not sure what the problem is. I'm seeing an error that my relying party configuration is incorrect. I thought I correctly followed the directions on the shib page. Attached are the idp log and relying-party.xml file. Does anybody know what might be the issue?
>

Looks like http: should be https:
http://my.shib.server.com/Shibboleth.sso/SAML2/POST
in some metadata.


> Thanks,
> Eric Stein
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net