Issue with URL re-direct after IDP authentication - signing Assertion

Cantor, Scott cantor.2 at osu.edu
Thu Jul 11 11:03:58 EDT 2013


> The next step proposed by my IDP was for me to send my certificate so the
> Assertion can be signed and encrypted.
> I sent my certificate bought from entrust to my IDP, I added the new
> certificate path and certificate key path to by shibboleth2.xml.

Do not do that. Use the self-signed certificate created during installation.

> then as suggested by my idp i added the below to my shibboleth2.xml
> signing="true" encryption="true"

None of that has anything to do with them signing or encrypting anything, that causes you to sign requests. Unless you need that, don't.

> now what happens is when i login to my site url -
> https://dev.myapp.com/testsite, i get redirected to my IDP and after i login
> i see the below error page and the saml redirect doesnt happen.

That does not appear to be the SP, or Shibboleth, but their IdP.

> is the a reason why this doesnt sign at the first attempt. so i need to
> configure anything else.

You'd have to ask them, it's their software. Unless that location bar is lying, because that's not a Shibboleth SP URL, it looks like a SSO endpoint in an IdP to me.

-- Scott





More information about the users mailing list