No peer endpoint available to which to send SAML response

Kevin Foote kpfoote at uoregon.edu
Wed Oct 1 17:02:49 EDT 2014


On Oct 1, 2014, at 1:55 PM, Dave Vernon <dvernon at loyalistcollege.com> wrote:

> If anyone out there would be willing the spend the time, I would appreciate any tips on how to go about troubleshooting this.  I've read the documentation, especially about SP metadata several times over, but I feel like I am going in circle and not making any progress.
> 
> The fact of the matter is, I'm really having troubles identifying what my data should be, and how to go about 'review and adjusting' what's in it.  I have used the SAML tracer plugin to FireFox to capture (and then decode), but again, nothing is clear to me as the problem

Hi Dave, 

The list is here to help. 

Scott has indicated the issue that you are having. Your metadata that the IdP has for your SP does not align with apache or IIS server is thinking it is. The result is that the IdP is receiving a request from some entity it does not know about. 

If your MD matches up with what your server is doing things will just work. 

Places to look are - in no particular order: 
- check your ACS endpoints http / vs https
- check your entityid matching at the SP and within the MD you give the IdP
- check the http server itself 

--------
thanks
 kevin.foote



More information about the users mailing list