Unable To Resolve "SPSSODescriptor role metadata for entityID XXX could not be resolved"

[Cantor, Scott]

On 2/25/15, 8:58 PM, "Kanuch, Andrew" <Andy.Kanuch at sdstate.edu> wrote:



>14:06:08.157 - WARN 
>[org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] -
>SPSSODescriptor role metadata for entityID 'https://www.okta.com/URL'
>could not be resolved

I assume it's not literally that string.

In any case, you do not in fact have metadata for that SP loaded.

>I’ve checked their metadata to confirm the requirements of their 
>SPSSODescriptor and it shows:

Whatever you're checking, it's not in fact loaded.

> 
> 
>I’ve created a RelyingParty for it, and set the profile configuration 
>signResponses=Never, and signAssertions=Never (The two I assume 
>correspond with the first to items in the SPSSODescriptor.)

They don't correspond at all, but that isn't the problem. But setting both 
to never would make it impossible for any unbroken SP to consume the 
result and you need to undo that change.

-- Scott