Message was signed, but signature could not be verified.

[Paul Hethmon]

On Aug 13, 2014, at 6:48 PM, Farzan Qureshi <fqureshi at rosmini.school.nz<mailto:fqureshi at rosmini.school.nz>> wrote:

Error Message: No peer endpoint available to which to send SAML response


This means the ACS URL in your AuthnRequest does not match any ACS URL in the metadata given to the IdP. ACS URL's are an EXACT match, case included, etc. Your SP is sending something that is wrong, or you gave the IdP the wrong metadata. Either way, it doesn't match.

Get a copy of FireFox and install the SAML Tracer plugin. Open SAML Tracer and run your test. You will see the exact value in the AuthnRequest the SP is sending. Match it against the metadata provided to the IdP. Then trace back to figure out why they are different.

Paul

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140813/12d01d8e/attachment-0001.html