SP with Multiple IdPs

[Mariela Da Graca]

Hello again,
I did some changes in my configuration.

   - Remove the ApplicationOverride in Shibboleth2.xml
   - I have only one entityID="https://dev-02.sinapti.co/shibboleth". I
   want to use it for all the Vhost that I've configured in apache2
   - I modified my SP metadata adding AssertionConsumerService per all the
   vhost. For example,

<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="
https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST" index="7"/>
    <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
Location="
https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST-SimpleSign"
index="8"/>
    <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="
https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/Artifact" index="9"/>
    <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="
https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/ECP" index="10"/>
    <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="
https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML/POST" index="11"/>
    <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="
https://uws.dev-02.sinapti.co/Shibboleth.sso/SAML/Artifact" index="12"/>
And the same for vhost2.
I've uploaded my new metadata in TestShib and the result was OK, but when I
test https://vhost1.dev-02.sinapti.co/myApplication/myApplication.jsp the
following error appears:
"*No peer endpoint available to which to send SAML response"*

I read about it
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors
but
I don't understand how to fix it.

The idp log is:

12:17:00.018 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] -
Relying party 'https://dev-02.sinapti.co/shibboleth' requested the
response to be returned to endpoint with ACS URL
'https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST'  and
binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no
endpoint, with that URL and using a supported binding,  can be found
in the relying party's metadata
12:17:00.018 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429]
- No return endpoint available for relying party
https://dev-02.sinapti.co/shibboleth

could you tell me how should I add the endpoint and show me an example?

Thanks in advance

Mariela

On Tue, Apr 30, 2013 at 2:21 PM, Mariela Da Graca <mariela at sinapti.co>wrote:

> Thank you Scott. I will try it.
>
>
> On Tue, Apr 30, 2013 at 2:07 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 4/30/13 1:04 PM, "Mariela Da Graca" <mariela at sinapti.co> wrote:
>>
>> >Nate and Scott,
>> >Thanks for your help.
>> >
>> >I have 3 different entityIDs configured as application override in
>> >shibboleth2.xml:
>>
>> As I said, none of that is needed for the use case you asked about. You
>> can get rid of all those overrides.
>>
>> >        <Location / >
>> >                AuthType shibboleth
>> >                ShibRequestSetting requireSession 1
>> >                ShibRequestSetting applicationId usyd
>>
>> Replace that with ShibRequestSetting entityID <name of IdP to use>
>>
>> -- Scott
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130502/32cb5cd6/attachment.html