New Shibboleth daemon on new server - user/wayf page just reloads over and over

[Cantor, Scott]

On 9/17/13 1:26 PM, "Johnny Lasker" <jlasker at educause.edu> wrote:

>I updated the hardcoded /DS to be /Login and also updated our metadata
>with incommon to point to /Login.

The metadata part isn't too crucial, it's just a nicety for documentation
purposes.

>Now, if you go here and click on 'log in with uncommon'
>https://new.educause.edu/user/login?destination=user/login it redirects
>to:
>https://new.educause.edu/user/wayf?shire=https%3A%2F%2Fnew.educause.edu%2F
>S
>hibboleth.sso%2FSAML%2FPOST&time=1379438279&target=ss%3Amem%3A6b5a62c4b722
>f
>8a1f1b186d1bd0df2240a248670f4124c8aa758907e59391c5d&providerId=https%3A%2F
>%
>2Fnew.educause.edu%2Fshibboleth-sp

That's a legacy WAYF request. You were treating it as a modern DS before,
so something is off. I don't know anything about your discovery
implementation, but perhaps it's not compatible with the old protocol.

I don't see how that would be happening unless you set the
discoveryProtocol to WAYF, though.

>We are trying to get to the wayf page with our org tiles, but it gives us
>a 'Direct access to this page is not supported' warning.

That error is from your code, I think, so I don't know what it means.

-- scott