SAML response error: No return endpoint available for relying party

[Kevin P. Foote]

On Tue, 3 Dec 2013, Kevin P. Foote wrote:

> On Tue, 3 Dec 2013, jfu wrote:
>
>> 14:49:21.646 - DEBUG
>> [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] -
>> Searching for entity descriptor with an entity ID of
>> https://test.mycompany.com/idp/shibboleth
>> 14:49:21.646 - DEBUG
>> [edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOEndpointSelector:62]
>> - Unable to select endpoint, no entity role metadata available.
>> 14:49:21.646 - ERROR
>> [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447]
>> - No return endpoint available for relying party
>> http://SP_IP_Address/simplesamlphp/www/saml2/sp/metadata.php
>
>
> You are making this alot more difficult than it really is..
>
> Your IdP can not return the user to the SP because you have
> misconfigured or missing metadata.
>
> The IdP can not find endpoints that match up for a request coming from
> entityID "http://SP_IP_Address/simplesamlphp/www/saml2/sp/metadata.php"
>
>
> <https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors#IdPTroubleshootingCommonErrors-EndpointIssues>
>
>
> Additionally.
>
> - You should not need to create a separate <rp:RelyingParty> entry to get
> things working initially .. the default should work, so remove that.
>
>
> - I believe I also suggested to not pull the metadata but rather use a
> file based MetadataProvider for starters. It's much easier..
>
>
> note that is a very odd entityID
>

Also note ..on your messed up metadata.. I think you are mixing up SAML
protocols and ACS matching.

Use the wiki URL and I think you are dealing with sub bullet 2 or 3

------
thanks
  kevin.foote