No peer endpoint available for SAML Response

[Kevin P. Foote]

On Thu, 26 Sep 2013, Adams, Gaelan wrote:

> I am running the shibboleth SP v2.5.2. We're trying to get SSO integrated in to a cakePHP app we're writing. We are successfully redirected and can authenticate at our IdP however when it tries to return the user to the app they receive this error:
>
> "Error Message: No peer endpoint available to which to send SAML response
> Unspecified Service Provider
> You have asked to login to Unspecified Service Provider"
>
> I do not have control or server access to the IdP however the team in charge of it provided me with these error logs:
>
> 18:09:14.388 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:203] - Relying party 'https://ourapplication.ist.ucf.edu' requested the response to be returned to endpoint with ACS URL 'https:// ourapplication.ist.ucf.edu/Shibboleth.sso/SAML2/POST'  and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' how
> ever no endpoint, with that URL and using a supported binding,  can be found in the relying party's metadata
> 18:09:14.389 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429] - No re
> turn endpoint available for relying party https:// ourapplication.ist.ucf.edu
>
> I have a feeling I'm missing something simple in one of our SP config files.
> Has anyone ever run in to this error before? What was the resolution?

This is a metadata issue..

The ACS URLs in the metadata that they are using do not appear to be
correct.

------
thanks
  kevin.foote