Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.

[Peter Schober]

Charles,

* Cantor, Scott <cantor.2 at osu.edu> [2015-07-09 17:15]:
> All I know is the message is not valid for the binding supported at
> the endpoint. You have provided nothing else for me to go on. Either
> the endpoint's wrong or the message is bad.

Right. Looking at the HTTP request header in the web browser you'll
quickly see that the endpoint is wrong:

  POST https://fssfedidpext.geappliances.com/idp/profile/SAML2/Redirect/SSO HTTP/1.1

I.e., the SP is HTTP-POSTing the SAML authentication request to an
endpoint that's meant for use with the HTTP-Redirect binding (not
HTTP-POST).

So find the above URL in your tenent configuration at the SP site and
change it to end in /idp/profile/SAML2/POST/SSO instead (i.e., replace
"Redirect" with "POST").
-peter