IDP and Internet Explorer page cannot be displayed error

[Moore, Patrick]

I can access /idp/Authn/UserPassword using HTTP only and the login page is displayed. The second I try HTTPS, it will fail with the same problem. 

Even idp/profile/Status shows "ok" on http only. 

I would say that would narrow it down to a certificate error. Tomcat is configured to allow TLS and I've confirmed the same on IE. Thoughts? 

Patrick Moore, CISSP
Senior Systems Administrator 
Marshall University Information Technology
Drinko Library 428L, 1 John Marshall Dr., Huntington, WV 25755
Phone: 304.696.3430

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, April 3, 2015 3:07 PM
To: Shib Users
Subject: Re: IDP and Internet Explorer page cannot be displayed error

On 4/3/15, 3:03 PM, "Moore, Patrick" <moore267 at marshall.edu> wrote:

>We used Fiddler earlier, and it tries to come back to the IdP, but it just never gets there. Fiddler didn't give us much to go on.

If you're saying it's logging the redirect and then shows it attempt to access the IdP at .../Redirect, then I'd say the IdP / web server / whatever is on that end is probably the cause.

Since I know the IdP per se works, the problem must be environmental in some way on that end, so I would start looking at whatever is not typical about the web server holistically. Load balancers, proxies, firewalls on that end, certificates...

What if the browser goes directly to the IdP?

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net