IdP initiated auth not working whereas SP initiated is ok

[Luay Zakaria]

Hi,



I have Shibboleth SP 2.5.3  implemented against Microsoft AD FS as the IdP.

The SP initiated login is working fine with no errors or warnings.

However when attempting an IdP initiated login through
https://sts.someurl.com/adfs/ls/idpinitiatedsignon, the process starts
properly, user fills credentials, then gets redirected back to the SP and
gets the error “An unexpected error has occurred” at the url:
https://someSPsite.com/Shibboleth.sso/SAML2/POST

The error in the shib logs says:

2014-12-18 10:07:09 DEBUG Shibboleth.Listener [14180] isapi_shib_extension:
sending message (default/SAML2/POST)

2014-12-18 10:07:09 DEBUG Shibboleth.Listener [14180] isapi_shib_extension:
send completed, reading response message

2014-12-18 10:07:09 ERROR Shibboleth.ISAPI [14180] isapi_shib_extension:
URL is malformed.

2014-12-18 10:07:09 DEBUG Shibboleth.SessionCache [14180]
isapi_shib_extension: searching local cache for session
(_ee632bf7b878513638722b20e64e816c)

2014-12-18 10:07:09 DEBUG Shibboleth.SessionCache [14180]
isapi_shib_extension: session not found locally, remoting the search

2014-12-18 10:07:09 DEBUG Shibboleth.Listener [14180] isapi_shib_extension:
sending message (find::StorageService::SessionCache)

2014-12-18 10:07:09 DEBUG Shibboleth.Listener [14180] isapi_shib_extension:
send completed, reading response message

2014-12-18 10:07:09 DEBUG Shibboleth.SessionCache [14180]
isapi_shib_extension: session not found in remote cache



I’m not quite sure how to troubleshoot “isapi_shib_extension: URL is
malformed.”

Is this a configuration issue on the IdP or the SP side? are there any
suggested solutions?



Any help is appreciated.

Thanks

Luay
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/27b9e254/attachment-0001.html