Message was signed, but signature could not be verified.

[Paul Hethmon]

On Aug 13, 2014, at 7:30 PM, Farzan Qureshi <fqureshi at rosmini.school.nz<mailto:fqureshi at rosmini.school.nz>> wrote:


                    AssertionConsumerServiceURL="https://idp.rosmini.school.nz/Shibboleth.sso/SAML2/POST"

This is the value its complaining about. That value from your request does not match anything in your metadata file. It also looks suspect as you are telling the IdP process to send the response back to the SP at a hostname that looks like the IdP hostname.

Did you install the IdP and SP on the same machine? If so, I would strongly recommend stopping right now and moving one of them to another machine. Running them both on the same machine is possible, but if you are doing so, then you have to make sure they are logically independent web servers.

Paul

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140813/c74c216f/attachment.html