Help needed: Testing Shibboleth SP and IdP integration on Windows platform and having issues.

[Aytha, Satish (US - Hyderabad)]

Thank you Scott,

I fixed the following (took out the port numbers) from the below and its started working.

    <rp:AnonymousRelyingParty provider="https://ushydsaytha1.us.deloitte.com/idp/shibboleth"
                           defaultSigningCredentialRef="IdPCredential" />

    <rp:DefaultRelyingParty provider="https://ushydsaytha1.us.deloitte.com/idp/shibboleth"
                         defaultSigningCredentialRef="IdPCredential">

Satish K. Aytha  SCEA, PMP
Deloitte Consulting India Pvt Ltd.,
US Direct: +1 615 718 6874| India Desk: +91 40 6670 6874| Mobile: +91 800 818 6555
www.deloitte.com





This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution of this message, or the taking of any action based on it, by you is strictly prohibited.

v.E.1


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Saturday, January 24, 2015 11:15 PM
To: Shib Users
Subject: RE: Help needed: Testing Shibboleth SP and IdP integration on Windows platform and having issues.

> In my shibd.log all I am getting is the below.
>
> 2015-01-23 19:10:00 INFO OpenSAML.MetadataProvider.XML : loaded XML
> resource (https://ushydsaytha1.us.deloitte.com:6443/idp/shibboleth)

That means the metadata is loading successfully, which means that the metadata is *wrong* if it's not working correctly.

> 2015-01-23 19:10:47 WARN OpenSAML.MessageDecoder.SAML2 [1]: no
> metadata found, can't establish identity of issuer
> (https://ushydsaytha1.us.deloitte.com:6443/idp/shibboleth)

And that means the IdP has misnamed itself and that name doesn't match what's in the metadata. Which I told you already. The provider setting in the IdP relying-party config file is wrong.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net