/Shibboleth.sso/Login protected, but /Shibboleth.sso/SAML2/POST doesn't seem to be protected

[Cantor, Scott]

On 1/21/13 6:56 PM, "Luay Zakaria" <luay.zakaria at gmail.com> wrote:
>
>With the primary (default) site  I am able to browse to
>/Shibboleth.sso/Login and I am redirected properly,
>
>also, when I navigate to /Shibboleth.sso/SAML2/POST I receive the
>expected message
> "opensaml::BindingException... ...Invalid HTTP method (GET)."

You can't just access that URL, that's a SAML endpoint and it's POST only.
You can't get that error unless you misuse it and send it a GET.

>however, for the sites in the OVERRIDE section, navigating to
>/Shibboleth.sso/Login I am redirected properly, *BUT* navigating to
>/Shibboleth.sso/SAML2/POST produces nothing as if the *.sso filter does
>not exist.

Then you have something misconfigured, but you have no details here so I'm
not going to speculate. Any site returning a 404 probably doesn't have the
script mapping defined. IIS is extremely difficult to configure properly
and the GUI will lie to you about what settings its using.

-- Scott