Problems configuring 2nd SP host to the same IDP

[Tony Autin]

Hello,

I'm having issues getting a 2nd site configured on my SP.

I'm getting the following error when checking the status:

Shibboleth ErrorISAPI extension can only be invoked to process Shibboleth
> protocol requests.Make sure the mapped file extension doesn't match actual
> content.
>

Here are the steps I've taken:

   1. In the shibboleth2.xml
      1. Added the site to the very first "InProcess" section
      2. Added the site to the "RequestMapper" section
      3. Reset the shibboleth windows service.
   2. In IIS
      1. Made sure to specify the lib64\shibboleth\isapi_shib.dll in the
      ISAPI Filter (on the site level)
      2. Made sure to specify the Handler Mappings with the executable box
      pointing to isapi_shib.dll. Also, the file extension is set to *.sso.
         1. In Request Restrictions, I have the "Invoke handler only if
         request is mapped to..." unchecked.
      3. The ISAPI extension is listed as "Allowed" in ISAPI and CGI
      Restrictions
      4. I've performed multiple IIS resets.

I'm sure I'm making a simple mistake, but I just can't seem to locate my
issue. Any ideas?

-- 
Tony Autin
Director of Implementation and Special Projects
1-888-510-3827 EXT 705
tony.autin at innosoft.ca
www.innosoft.ca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140701/5318da3c/attachment.html