Shibboleth IDP trust with other IDP

[krrishv]

Thanks Scott, I followed your suggestion and i did something like below.

1) In the apache22.conf i put in a directive below.

<Location /idp/Authn/RemoteUser>
  AuthType shibboleth
  ShibCompatWith24 On
  ShibRequestSetting requireSession 1
  require shib-session
  ShibUseHeaders On
</Location>

2) in Attribute-map.xml i have defined attribute below.

<Attribute name="UserName" 
    nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" 
    id="UserName">
    <AttributeDecoder xsi:type=" StringAttributeDecoder"
caseSensitive="false"/>
  </Attribute>

3) In Shibboleth2.xml i have the Remote_USER set as below.

REMOTE_USER="eppn persistent-id UserName">

Now i assume the next step is to have my external IDP do a SAML to
Shibboleth SP. I configured that. Now when i try to access the resource
http://win-q7be9bclkh7.krish.com:8080/idp/Authn/RemoteUser in the SP side,
it goes back to my external IDP for authentication. Once i provide the
credentials, i get the below screen.

opensaml::BindingException

The system encountered an error at Fri Mar 07 08:18:56 2014

To report this problem, please contact the site administrator at
root at localhost.

Please include the following message in any email:

opensaml::BindingException at
(http://win-q7be9bclkh7.krish.com:8080/Shibboleth.sso/SAML2/POST)

SAML message delivered with POST to incorrect server URL.

What am i doing wrong here?



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-IDP-trust-with-other-IDP-tp7596134p7596455.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.