Spring Security Saml + Idp 3.1.2: The application you have accessed is not registered for use with this service

[Павел Шашко]

Hello.
I want to configure Spring Security Ext. to work with Idp v.3.1.2.

I use spring tutorial from here:
http://docs.spring.io/spring-security-saml/docs/current/reference/html/index.html

And Idp tutorial from here:
https://wiki.shibboleth.net/confluence/display/IDP30/Installation

My environment:
- Windows Server 2008
- tomcat 7.0.52
- jdk_version: 1.8.0_25

My steps:
1. I have installed(uziped) idp via install.bat
2. set idp.home in <context-param> in %idp.home/webapp/WEB-INF/web.xml
3. built -> deployed idp.war to tomcat
4. check http://127.0.0.1:8080/idp/status - OK
5. set up idp and sp metadata files in %idp.home/metadata
6. create link in metadata-providers.xml to sp metadata file

    <MetadataProvider
xmlns="urn:mace:shibboleth:2.0:metadata"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata
http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"
xsi:type="FilesystemMetadataProvider"
id="LocalMetadata"
failFastInitialization="true"
metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp.xml"/>

7. in spring security config created link to idp metadata file
    *in idp metadata i made this changes:*
     <SingleSignOnService
Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="
http://localhost:8080/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="
http://localhost:8080/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
Location="http://localhost:8080/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="
http://localhost:8080/idp/profile/SAML2/Redirect/SSO"/>
8. in spring security configured to use metadata for sp from the
above-described file
9. After I press initialize SSO and redirect to
http://localhost:8080/idp/profile/SAML2/POST/SSO I see error :
Web Login Service - Unsupported Request
The application you have accessed is not registered for use with this
service.

Firstly i thought that the problem was in sp metadata config and I check
that spring use as SP-metadata file the same file as IDP reference
in metadata-providers.xml.

What else I need to set up to solve the problem?
Please, help me.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150821/82d38bac/attachment.html>