IdP initiated auth not working whereas SP initiated is ok

[Luay Zakaria]

Actually, shibd.log is showing a successful session being created:

2014-12-18 10:07:09 INFO Shibboleth.SessionCache [1]: new session created:
ID (_ce47b311a1f489cb3fef260f38841a80) IdP (
http://sts.someIDP.com/adfs/services/trust)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (....)

Transaction.log is showing a matching session successfully created as well.

At the sametime, native_warn.log is showing the error:

2014-12-18 10:07:09 ERROR Shibboleth.ISAPI [14180] isapi_shib_extension:
URL is malformed.





-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Cantor, Scott
Sent: Thursday, December 18, 2014 10:47 AM
To: Shib Users
Subject: Re: IdP initiated auth not working whereas SP initiated is ok



On 12/18/14, 3:20 PM, "Luay Zakaria" <luay.zakaria at gmail.com> wrote:



>

>I’m not quite sure how to troubleshoot “isapi_shib_extension: URL is

>malformed.”



There's an invalid URL passing through a sanitizer and being flagged.

Checking the RelayState would be the most obvious place, but it's also
possible it's in the message somewhere.



Using native.log is rarely helpful to actually diagnose anything, but if
shibd.log shows it's getting nowhere, then the error is probably pretty
early in the sequence.



-- Scott



--

To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/d3274096/attachment.html