"SAML message intended destination endpoint URI required by binding was empty"

[Liam Hoekenga]

I'm trying to configure WSO2's "Carbon" server to use our Shib IdP for
authentication.

The message  that shows up in my process log is..

15:25:02.734 - ERROR
[org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder:200] - SAML
message intended destination endpoint URI required by binding was empty
15:25:02.742 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:348]
- Message did not meet security requirements
org.opensaml.xml.security.SecurityException: SAML message intended
destination (required by binding) was not present
15:25:02.895 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:312]
- Decoding message with decoder binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
15:25:02.897 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:344]
- Error decoding authentication request message
org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or
SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message

Stupid question.  I'm getting that because the AuthnRequest looks like..

<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
ID="hcalffjcdahooaakphckclfaalgmlebdhofoepja"
IssueInstant="2013-06-05T20:13:06.563Z" Version="2.0">

(notice the absence of a destination)

Is the top level AuthnRequest element the only place that the destination
would show up?  It looks like I'm having an issue decoding the message...
am I having problems finding the destination because I can't decode the
message?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130605/9eeaf040/attachment.html