No peer endpoint available to which to send SAML response

[Nate Klingenstein]

Dave,

It looks like a match to me too, which leads me to wonder again about what's getting loaded by that IdP.  Your IdP, if Shibboleth, should be very explicit about what it's loading or receiving and why it's being discarded.

Thanks,
Nate.

On Oct 1, 2014, at 5:10 PM, Dave Vernon <dvernon at loyalistcollege.com> wrote:

> I'm sorry, I should add (regarding your first comment)
> 
> In the AuthnRequest I have this ACS
> 
> "https://lms.lcaat.ca/Shibboleth.sso/SAML2/POST" 
> 
> In the SD's metadata on the IdP server I have this in the md:ACS section
> 
> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lms.lcaat.ca/Shibboleth.sso/SAML2/POST" index="1"/>
> 
> 
> This looks like a match to me?
> 
> ________________________________________
> From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
> Sent: Wednesday, October 01, 2014 5:09 PM
> To: Shib Users
> Subject: RE: No peer endpoint available to which to send SAML response
> 
>> If anyone out there would be willing the spend the time, I would appreciate
>> any tips on how to go about troubleshooting this.  I've read the
>> documentation, especially about SP metadata several times over, but I feel
>> like I am going in circle and not making any progress.
> 
> The AuthnRequest from the SP will contain an AssertionConsumerServiceURL attribute. The location will not be one of the AssertionConsumerService endpoint Locations in the metadata. That's it.
> 
> The ACS location generated by the SP is a self-referential location. Understanding how web servers have to be configured to properly allow self-referential links to be generated is basically the entire issue.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net