"The application you have accessed is not registered for use with this service." while testing shibboleth-idp on testshib

McKean, Brandon Scott - mckeanbs mckeanbs at jmu.edu
Wed Jul 22 16:16:37 EDT 2015 

Hi Remi,

When I first was setting up Shibboleth I'd get this error when my attribute-filter.xml needed adjusting to allow testshib. This is assuming you already have metadata for them configured in metadata-providers.xml and their file there. I believe testshib has some examples to this end, but if now I can share mine.

Brandon

On Wed, 2015-07-22 at 15:59 -0400, Remi Mayrand-Provencher wrote:
Hi, it's my first time trying to install Shibboleth idp 3 and I've been trying to make it working for a while now, and the best I could get from testshib when trying to test it was the page at this URL: https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S2 9BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac<https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO-3FSAMLRequest-3DfZJNT4MwHMa-252FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji-252F8WXby8bU-252BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m-252Ffi-252BeOZ4bOd5s7vihi3nT4-252FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S29BvIiEwTOy8vPSGy4bLg-252FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ-252BM0bpf0Thh6gN-252FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk-252Bfsd0i8-253D-26RelayState-3Dcookie-253A1437592673-5F1eac&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=9DTUyvzo75ZjbG8QsnPgqZWYBmIMT4gmn4eS-COwVS4&e=>

Here is what it contains :


    <!DOCTYPE html>
<html>
        <head>
        <meta charset="utf-8">
        <title>Web Login Service - Unsupported Request</title>
        <link rel="stylesheet" type="text/css" href="/idp/css/main.css<view-source:https://184.107.146.250/idp/css/main.css>">
        </head>

        <body>
    <div class="wrapper">
        <div class="container">
                <header>
                                <img src="/idp/images/dummylogo.png<view-source:https://184.107.146.250/idp/images/dummylogo.png>" alt="Replace or remove this logo">
                                <h3>Web Login Service - Unsupported Request</h3>
                        </header>

                <div class="content">
            The application you have accessed is not registered for use with this service.            </div>
        </div>

        <footer>
                <div class="container container-footer">
                        <p class="footer-text">Insert your footer text here.</p>
                </div>
        </footer>

    </div>
    </body>
</html>

I installed my shibboleth-idp on a server and I am testing it from my local browser. I can access https://184.107.146.250/idp/status<https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_status&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=tawisOrEZkPFIhRQtxDq5RJY1wH3rhd12mdYjW6LZzU&e=> from my local computer (where 184.107.146.250 is my server's IP) and I get this result :


### Operating Environment Information
operating_system: Linux
operating_system_version: 2.6.32-5-amd64
operating_system_architecture: amd64
jdk_version: 1.7.0_75
available_cores: 4
used_memory: 345 MB
maximum_memory: 773 MB

### Identity Provider Information
idp_version: 3.1.2
start_time: 2015-07-22T14:42:55-04:00
current_time: 2015-07-22T15:14:07-04:00
uptime: 1871692 ms

service: shibboleth.LoggingService
last successful reload attempt: 2015-07-22T18:42:45Z
last reload attempt: 2015-07-22T18:42:45Z

service: shibboleth.ReloadableAccessControlService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z

service: shibboleth.MetadataResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z

        metadata source: ShibbolethMetadata

service: shibboleth.RelyingPartyResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z

service: shibboleth.NameIdentifierGenerationService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z

service: shibboleth.AttributeResolverService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z

service: shibboleth.AttributeFilterService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z



Here is the content of idp-process.log when I try to test my idp:

2015-07-22 15:21:49,564 - DEBUG [org.opensaml.profile.action.impl.DecodeMessage:64] - Profile Action DecodeMessage: Decoding message using message decoder of ty
pe org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder for this request
2015-07-22 15:21:49,565 - DEBUG [org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:64] - Beginning to decode message from HttpServl
etRequest
2015-07-22 15:21:49,565 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64] - Decoded RelayState: cookie:1437592673_1eac
2015-07-22 15:21:49,565 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:96] - Base64 decoding and inflating SAML message
2015-07-22 15:21:49,566 - DEBUG [org.opensaml.core.xml.util.XMLObjectSupport:161] - Parsing InputStream into DOM document
2015-07-22 15:21:49,566 - DEBUG [org.opensaml.core.xml.util.XMLObjectSupport:171] - Unmarshalling DOM parsed from InputStream
2015-07-22 15:21:49,567 - DEBUG [org.opensaml.core.xml.util.XMLObjectSupport:183] - InputStream succesfully unmarshalled
2015-07-22 15:21:49,567 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:79] - Decoded SAML message
2015-07-22 15:21:49,567 - DEBUG [org.opensaml.core.xml.util.XMLObjectSupport:236] - Marshalling XMLObject
2015-07-22 15:21:49,568 - DEBUG [org.opensaml.core.xml.util.XMLObjectSupport:239] - XMLObject already had cached DOM, returning that element
2015-07-22 15:21:49,569 - DEBUG [PROTOCOL_MESSAGE:121] -
<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest
    AssertionConsumerServiceURL="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_Shibboleth.sso_SAML2_POST&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=JVoxNB4p0Lqn1Uy4BICUmhtJ28KhrttWpRnSlopoYpM&e=>
    Destination="https://184.107.146.250/idp/profile/SAML2/Redirect/SSO"<https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=nPpeFfPLNwohHYupQKjXsIBTHOQdN_Iya1SqELwLwvA&e=>
    ID="_dab433c9aa86f298ba16d87858a3c0db"
    IssueInstant="2015-07-22T19:17:53Z"
    ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=></saml:Issuer>
    <samlp:NameIDPolicy AllowCreate="1"/>
</samlp:AuthnRequest>
2015-07-22 15:21:49,570 - DEBUG [org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:70] - Successfully decoded message from HttpServletRequest.
2015-07-22 15:21:49,570 - DEBUG [org.opensaml.profile.action.impl.DecodeMessage:68] - Profile Action DecodeMessage: Incoming request decoded into a message of type org.opensaml.saml.saml2.core.impl.AuthnRequestImpl
2015-07-22 15:21:49,571 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'fauth' not included in audit format
2015-07-22 15:21:49,571 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'D' not included in audit format
2015-07-22 15:21:49,572 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'pasv' not included in audit format
2015-07-22 15:21:49,572 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'b'
2015-07-22 15:21:49,572 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'I'
2015-07-22 15:21:49,572 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'p' not included in audit format
2015-07-22 15:21:49,573 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler' on INBOUND message context
2015-07-22 15:21:49,574 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,575 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler' on INBOUND message context
2015-07-22 15:21:49,575 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,576 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler' on INBOUND message context
2015-07-22 15:21:49,576 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,577 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler' on INBOUND message context
2015-07-22 15:21:49,578 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,578 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198] - Metadata document did not contain a descriptor for entity https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
2015-07-22 15:21:49,578 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281] - Metadata document did not contain any role descript
ors of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for entity https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
2015-07-22 15:21:49,578 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252] - Metadata document does not contain a role of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting protocol urn:oasis:names:tc:SAML:2.0:protocol for entity https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
2015-07-22 15:21:49,579 - INFO [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108] - Message Handler:  No metadata returned for https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=> in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol urn:oasis:names:tc:SAML:2.0:protocol
2015-07-22 15:21:49,579 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler' on INBOUND message context
2015-07-22 15:21:49,580 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,580 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109] - Message Handler:  No metadata context found, nothing to do
2015-07-22 15:21:49,580 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer https://sp.testshib.org/shibboleth-sp<https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
2015-07-22 15:21:49,581 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284] - Resolving relying party configuration
2015-07-22 15:21:49,581 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290] - Profile request is unverified, returning configuration shibboleth.UnverifiedRelyingParty
2015-07-22 15:21:49,581 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration shibboleth.UnverifiedRelyingParty for request
2015-07-22 15:21:49,582 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'SP'
2015-07-22 15:21:49,582 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'IDP'
2015-07-22 15:21:49,583 - WARN [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111] - Profile Action SelectProfileConfiguration: Profile http://shibboleth.net/ns/profiles/saml2/sso/browser<https://urldefense.proofpoint.com/v2/url?u=http-3A__shibboleth.net_ns_profiles_saml2_sso_browser&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=ypkb6uCEkF0NTlFBeu591LWR4mbomtGGbYpWaufdpRg&e=> is not available for relying party configuration shibboleth.UnverifiedRelyingParty
2015-07-22 15:21:49,584 - DEBUG [org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] - No SAMLBindingContext or binding URI available, error must be handled locally
2015-07-22 15:21:49,586 - DEBUG [org.apache.velocity:100] - No class specified for #evaluate() context, so #set calls will now alter the global context and no longer be local.  This is a change from earlier versions due to VELOCITY-704.  If you need references within #evaluate to stay local, please use the automatically provided $evaluate namespace instead (e.g. #set($evaluate.foo = 'bar') and $evaluate.foo).
2015-07-22 15:22:48,357 - DEBUG [org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup task
2015-07-22 15:22:48,357 - DEBUG [org.opensaml.storage.impl.MemoryStorageService:122] - No expired records found in storage
2015-07-22 15:27:47,470 - INFO [net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:327] - Default key version has not changed, still secret1
2015-07-22 15:32:48,357 - DEBUG [org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup task
2015-07-22 15:32:48,357 - DEBUG [org.opensaml.storage.impl.MemoryStorageService:122] - No expired records found in storage

Is there anything obvious that I am missing? Tell me if you need anything else to be able to better answer me.
Thank you!

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150722/abbadb12/attachment-0001.html>

More information about the users mailing list