Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.

[Cahill, Charles (GE Appliances)]

FINALLY PAYDIRT !!!   After 3 mos of hard research this thing is up using Docker Code coming out of Github which is
Being served up by a Voyager front end webservice.  All SSL from front end to back.   

Huge shoutout here to Peter Schober and Scott Cantor !!!  I know that I could not have done it without both of your
help.   You guys are amazing and your will to help others be successful is absolutely something to be proud of.  Bravo !!!

Thanks very much for everything !!

Charles Cahill
SSO/LDAP/Web Application Support

Desk 502 452-4737  
Cell   502 541-5702
Charles.Cahill at ge.com



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Monday, July 20, 2015 5:32 AM
To: users at shibboleth.net
Subject: Re: Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.

* Cahill, Charles (GE Appliances) <Charles.Cahill at ge.com> [2015-07-20 05:05]:
> Everything seems to be working at this point. I have a login page, can 
> login to the IDP and get authenticated.  Looks like all of the header 
> info is passed as far as I can tell in SAML tracer and I get no 
> errors, but then I get the following
> 
> "NetworkError: 400 Bad Request - https://urldefense.proofpoint.com/v2/url?u=https-3A__ge-2Dappliances.pagerduty.com_sso_saml_consume&d=AwICAg&c=IV_clAzoPDE253xZdHuilRgztyh_RiV3wUrLrDQYWSI&r=Ay4xjbXoe6YvlvYwTANr9ZsOm6cEXvasE-gwLIuoyN8&m=pXMOaRrSALv3IysXerr2kCnxqrKjPa4vpoEKs-gYqMk&s=VN8mtMIq6q_SqRcQ-9WyMcFOU57Yfn_VRMjC2H5oUyQ&e= "
> 
> Any ideas why it sends me back to this instead of on into the application?

That's the (assumed, from their SAML 2.0 Authentication Request
message) endpoint they want the SAML response to be sent to.

Why doing that causes the above error you'll need to ask the vendor.
Be sure to provide them with the info from SAML Tracer, that will show what kind of SAML message you sent, and where.

Since this error is not from the Shibboleth software and only happens after authenticating at your IDP this one you will have to debug yourself.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net