"LoginContext key cookie was not present in request" with particular SP

[Tom Scavo]

On Fri, Jun 28, 2013 at 12:02 PM, Ian Rifkin <irifkin at brandeis.edu> wrote:
>
> My logs
> tells me that "SAML message intended destination endpoint URI required by
> binding was empty" which seems pretty straight forward, but in a previous
> message from the SP vendor they linked me to a wikipedia section on the
> SAML2 auth request protocol, which now looking at it, doesn't have a
> destination attribute. Am I reading this wrong?

No, you're reading the wikipedia entry correctly. Typically an
AuthnRequest is NOT signed, in which case trusted metadata is used to
identify the sender.

Is the SP signing the AuthnRequest? If so, the Destination XML
attribute is required. Alternatively, then can stop signing the
request, especially if you have trusted metadata for the SP.

Tom