Help needed: Testing Shibboleth SP and IdP integration on Windows platform and having issues.

[Aytha, Satish (US - Hyderabad)]

Hi,

I initially tried with latest versions of the required software and had issues with even starting up all the services, however following combination looks to be mingling with each other and hence I have installed following software on Windows 7 Platform (Enterprise Edition with Service Pack 1)

Java JDK 1.7.0._71

Open DS 2.3.0  Build 003
Tomcat 8.0.15
Shibboleth Identity Provider 2.3.0

Apache 2.4.10 win 64 VC 11
Shibboleth Service Provider  2.5.0

For few days, I have been facing the issue reaching out to a secured page  where the expected outcome is to have the IDP send a page requesting authentication details and thereby establish a SSO session.

I am getting the following error page.


opensaml::saml2md::MetadataException at (https://ushydsaytha1.us.deloitte.com:553/secure/secure.html)

Unable to locate metadata for identity provider (https://ushydsytha1.us.deloitte.com:6443/idp/shibboleth)
[cid:image002.jpg at 01D0360E.2A28BFA0]

I have tried to follow the below mentioned blogs/help, but could n’t have a luck in resolving the issue and would need your help in resolution.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPConfigurationChanges#NativeSPConfigurationChanges-Shibboleth2.5.0ConfigurationChanges
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors#NativeSPTroubleshootingCommonErrors-Unabletolocatemetadataforidentityprovider%28https://identities.supervillain.edu/idp/shibboleth%29.
http://stackoverflow.com/questions/24261141/unable-to-locate-metadata-for-identity-provider
https://wiki.library.ucsf.edu/pages/viewpage.action?pageId=296517633

following IdP and SP links are working as expected individually and having the issue with the total solution.

verifying the IdP Installation

https://ushydsaytha1.us.deloitte.com:6443/idp/profile/Status

IdP metadata.
https://ushydsaytha1.us.deloitte.com:6443/idp/shibboleth
https://localhost:6443/idp/profile/Metadata/SAML

verifying the SP Installation

https://localhost/Shibboleth.sso/Status

SP Metadata.

https://ushydsaytha1.us.deloitte.com/Shibboleth.sso/Metadata


I have also tried to connect my Shibboleth SP to the testshib idp as mentioned on the site  https://www.testshib.org/test.html, Though I made some progress on reaching out to the IdP provided login/authentication page and having below error after providing the expected authentication details.

[https://idp.testshib.org/idp/images/logo.jpg]
ERROR

Something horrible happened. If the below message states that the SAML 2 SSO Profile is not configured for you, then either you haven't uploaded your metadata<https://www.testshib.org/metadata.html> yet or your SP's entityID has not yet been properly configured.

If your message did not meet security requirements, ensure that your SP's clock is accurately set and that you're not using the back button during the authentication process.

For more information, you can check out the IdP's error log<http://idp.testshib.org/cgi-bin/idplog.cgi?lines=300>.

The Common Errors page for the IdP at the Shibboleth Wiki<https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors> may help you debug the problem.
Error Message: No peer endpoint available to which to send SAML response

(User is redirected to https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO )

I could be available over the phone or live session if you would like to. Your quick response is greatly appreciated.


Satish K. Aytha  SCEA, PMP
Manager | Application Management Services
Deloitte Consulting India Pvt Ltd.,
Plot No 14 & 15, Deloitte Dr, Hitec City Layout, Madhapur, Hyderabad 500081
US Direct: +1 615 718 6874| India Desk: +91 40 6670 6874| Mobile: +91 800 818 6555
saytha at deloitte.com<mailto:saytha at deloitte.com> | www.deloitte.com<http://www.deloitte.com>

Please consider the environment before printing.





This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution of this message, or the taking of any action based on it, by you is strictly prohibited.

v.E.1







-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150122/2d8c331b/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 19961 bytes
Desc: image002.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20150122/2d8c331b/attachment-0002.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 4841 bytes
Desc: image003.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20150122/2d8c331b/attachment-0003.jpg