SAML SP not working with TestShib

[Ben Henley]

Hello list,

I'm trying to get the SAML SP support in our helpdesk app to work with a
TestShib IdP.

Our app is known to work with some SAML IdP implementations, but I can't
work out the correct settings to use with TestShib.

The SP has settings for SSO URL, SLO URL, Issuer Metadata URL, X509 cert.

Based on looking at the info in testshib-providers.xml I have tried various
SSO URLs and they return different errors:


Using
https://idp.testshib.org/idp/profile/Shibboleth/SSO
Error Message: Error decoding Shibboleth SSO request

Using https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO
Error Message: SAML 2 SSO profile is not configured for relying party
http://192.241.188.182/saml/metadata/9.xml

Using https://idp.testshib.org/idp/profile/SAML2/POST/SSO
Error Message: Error decoding authentication request message


What would cause these errors? I have entered the X509 cert from the issuer
metadata.

Is our SP implementation not providing some needed value?

Thanks,

Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141127/2363846a/attachment.html