Shibboleth SP browser loops when attempting to connect to protected site
String76
hortonb at kayacorp.com
Fri Aug 8 13:13:05 EDT 2014
shibboleth2.xml
<http://shibboleth.1660669.n2.nabble.com/file/n7605202/shibboleth2.xml>
Before I get into the details be aware that I am new when it comes to XML
and SAML so please go easy on me. I have been doing quite a bit of reading
over the past week or so to get to where I am now but have been stuck for
the past couple days on this loop problem. When attempting to connect to
the protected site Shibboleth redirects my browser back to the iDP and then
the browser loops/refreshes three times and then the error 'too many
requests' pops up at the top of the page.
My setup is a Windows 7 test system with IIS 7.5 and a web applications
configured for SSL only. Shibboleth 2.5.3 is installed to the default
location. My current shibboleth2.xml file is attached. My idP is VMware
Horizon Workspace Portal 2.0 which supports SAML 2.0. Within Workspace I
have configured a web app to point to
https://iometer1.kayacorp.com/EmpWeb/Shibboleth.sso/SAML2/POST as the ACS
URL. Note that in the xml file in the MetadataProvider section I have
commented out the filter for the certificate. When I included this line
with either a crt or pem the shibd.log would would error saying the metadata
source is not signed (the iDP does have a SAML certificate and this is what
I exported into a pem file).
Also, I have read through several posts about redirect loops and have tried
playing with the cookieProps setting but keep getting the same results.
Hopefully someone can point me in the right direction here and tell me where
I messed thing up?
Regards,
Bryan
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-SP-browser-loops-when-attempting-to-connect-to-protected-site-tp7605202.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list