Meteor.js and Shibboleth IP
Peter Schober
peter.schober at univie.ac.at
Wed Jul 1 10:56:44 EDT 2015
* Truby Voglund <tvoglund at mocodevco.com> [2015-07-01 16:23]:
> Thank you so much for the help. I have now got the ACS Url to not
> be dynamic.
Good!
> But I monitor all calls to my SP and do not see any coming from the
> Shibboleth IdP (testShib).
I don't know what that means but the error message you (and me, and
everyone else) can get from the public testshib log files is pretty clear:
10:49:19.005 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] -
Relying party 'http://tuadevshibbolet.cloudapp.net/shibboleth-sp'
requested the response to be returned to endpoint with ACS URL
'http://tuadevshibbolet.cloudapp.net/_saml/validate/shibboleth-idp/1ed79ec15dfd'
and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however
no endpoint, with that URL and using a supported binding, can be
found in the relying party's metadata
10:49:19.005 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447]
- No return endpoint available for relying party http://tuadevshibbolet.cloudapp.net/shibboleth-sp
Since the IDP says it doesn't have the quested ACS URL on record (for
that entityID) I guess this can only mean that testshib has
differing/stale metadata for your SP. I /think/ uploading with the same
file name will replace the existing metadata on testsib.
But you really need to start using the tools available to you.
I have no specical access or insight neither into your SP nor
testshib. Even the link to find the error log was provided in the
testhib error message.
-peter
More information about the users
mailing list