SAML response error: No return endpoint available for relying party

[Kevin P. Foote]

On Tue, 3 Dec 2013, jfu wrote:

> 14:49:21.646 - DEBUG
> [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] -
> Searching for entity descriptor with an entity ID of
> https://test.mycompany.com/idp/shibboleth
> 14:49:21.646 - DEBUG
> [edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOEndpointSelector:62]
> - Unable to select endpoint, no entity role metadata available.
> 14:49:21.646 - ERROR
> [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447]
> - No return endpoint available for relying party
> http://SP_IP_Address/simplesamlphp/www/saml2/sp/metadata.php


You are making this alot more difficult than it really is..

Your IdP can not return the user to the SP because you have
misconfigured or missing metadata.

The IdP can not find endpoints that match up for a request coming from 
entityID "http://SP_IP_Address/simplesamlphp/www/saml2/sp/metadata.php"


<https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors#IdPTroubleshootingCommonErrors-EndpointIssues>


Additionally.

- You should not need to create a separate <rp:RelyingParty> entry to get
things working initially .. the default should work, so remove that.


- I believe I also suggested to not pull the metadata but rather use a
file based MetadataProvider for starters. It's much easier..


note that is a very odd entityID


------
thanks
  kevin.foote