AuthnFailed and SP IdP test configuration

[Brian Tingle]

________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Eric Goodman [Eric.Goodman at ucop.edu]
Sent: Friday, June 07, 2013 4:11 PM
To: Shib Users
Subject: RE: AuthnFailed and SP IdP test configuration

> Then I am prompted for login as expected, and (since I have an account on said IdP) I get back to
> https://nuxeo-dev/cdlib.org with the generic “It works!” message. (I did this at 4:05PM, if you want to
> see if the logs reflect my connection and/or indicate any other parsing errors).

Well, I hope this does not foreshadow the next challenge in my quest -- on test shib two it correctly redirected me back to https://nuxeo-dev.cdlib.org/nuxeo/ and showed me the lizard I can see on tomcat at http://nuxeo-dev.cdlib.org:8080/nuxeo/ via ajp proxy.

> I’ll have to defer to people on this list as to whether the original request is malformed, or whether the
> IdP
> is failing to handle a valid configuration, but if you can change the format of your request, it looks like
> you will at least get the login prompt and a return back to your application.

I'm a very novice shibboleth-sp user.  Is the format of the request something I can configure in shibboleth2.xml?  I think the only things I changed shibboleth2.xml from the config that worked with testshib.org were the SSO element and the MetadataProvider element.

My IdP is telling me "I have tested my test IDP against multiple service providers and I don’t see any problem with my configuration. Please let me know if you have any questions."

The only thing I can think to do is that I must set up my own test IdP to figure out what the problem is?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130611/e27922a3/attachment.html