Shibboleth SP browser loops when attempting to connect to protected site

[Cantor, Scott]

On 8/11/14, 11:09 AM, "String76" <hortonb at kayacorp.com> wrote:
>
>Thank you again for the assistance.  I have cleaned up the site element
>and
>left the Path name as EmpWeb and the handlerURL at default (xml
>attached). 
>On the idP side I have set the ACS URL to
>https://IOMETER1.KAYACORP.COM:443/EmpWeb.

Which is wrong. The ACS for SAML 2 POST binding responses is
https://iometer1.kayacorp.com/Shibboleth.sso/SAML2/POST

But that wouldn't loop, because you'd never be redirected back to the
resource, it would just fail

>  I have tried many different
>combination of URLs on the idP for the ACS which all result in the loop
>and
>then the 'too many requests' message at the top of the browser.

Pointing the IdP at the protected resource as the ACS is guaranteed to
loop.

-- Scott