Shibboleth SP Leading to 404

[Cantor, Scott]

On 3/14/13 3:05 PM, "Jeff Gehly" <gehly_jeffrey at bah.com> wrote:

>When I have disabled shibboleth's site protection, I can hit the site just
>fine.  When I turn it on, I end up with a 404 (the IdP logs just show a
>SAML
>redirect with a 404 status code).

I don't understand what is returning the 404 based on your description,
and I don't follow the statement about the IdP log or the redirect.

>I've seen another thread in the mailing list with a problem like this that
>said to check whether the filters are present on IIS.  I checked and the
>ISAPI filter is in place and the handler mappings have an entry for *.sso.

That applies if requesting SP handlers returns a 404.

>The /Status handler returns without a problem, and the Metadata generates.

Those are handlers, thus it's not the SP problem you're referring to, and
nothing else in the SP would involve a 404, so I don't really follow what
the connection to the SP would be.

For example, in the course of login, the only SP handler that would
usually run directly would be the ACS at /Shibboleth.sso/SAML2/POST or
whatever it is. If that returns you an error that's not a 404 if you
access it, then nothing involving the SP could be returning a 404 that I
can think of.

-- Scott