IdP initiated SSO

[Cantor, Scott]

> They do that and get a 500 error on my servers and my logs show nothing.

It's possible it's triggering an exception that isn't getting logged well thanks to me, so it could be that IIS' error message hiding by default is preventing them from seeing what would be at least an intelligible (to me) error. Might help you identify something more useful to tell them.

> Are my assumptions correct regarding POST to my endpoint as detailed
> above?  Can anyone see an issue regarding the data in the assertion above?

If anything was wrong at that level, it'd get logged, so it's probably more low level than the XML content.

And thank you for the laugh, when you said this was Oracle trying to make their own product work and claiming it doesn't support features we know it supports, that was fun. It's the little things in life.

-- Scott