/Shibboleth.sso/Login protected, but /Shibboleth.sso/SAML2/POST doesn't seem to be protected

[Cantor, Scott]

On 1/21/13 7:38 PM, "Luay Zakaria" <luay.zakaria at gmail.com> wrote:

>Thanks Scott.. good advice!
>the site still failed the /SAML2/POST even after I made it the only
>configuration. whereas other sites work without issues when configured.
>I'm thinking it's a IIS filter issue. next step: uninstalling Shib SP,
>and reinstalling fresh.

It should be a script mapping issue, but not if /Login worked, that's the
same mechanism. I'm not sure how you could get one to work and have the
other return a 404.

But yes, that tells you there's a site level issue in IIS, and nothing to
do with your changed settings.

-- Scott