Issue with URL re-direct after IDP authentication - signing Assertion
Cantor, Scott
cantor.2 at osu.edu
Thu Jul 11 11:03:58 EDT 2013
> The next step proposed by my IDP was for me to send my certificate so the
> Assertion can be signed and encrypted.
> I sent my certificate bought from entrust to my IDP, I added the new
> certificate path and certificate key path to by shibboleth2.xml.
Do not do that. Use the self-signed certificate created during installation.
> then as suggested by my idp i added the below to my shibboleth2.xml
> signing="true" encryption="true"
None of that has anything to do with them signing or encrypting anything, that causes you to sign requests. Unless you need that, don't.
> now what happens is when i login to my site url -
> https://dev.myapp.com/testsite, i get redirected to my IDP and after i login
> i see the below error page and the saml redirect doesnt happen.
That does not appear to be the SP, or Shibboleth, but their IdP.
> is the a reason why this doesnt sign at the first attempt. so i need to
> configure anything else.
You'd have to ask them, it's their software. Unless that location bar is lying, because that's not a Shibboleth SP URL, it looks like a SSO endpoint in an IdP to me.
-- Scott
More information about the users
mailing list