"The application you have accessed is not registered for use with this service." while testing shibboleth-idp on testshib

[Kevin Foote]

> On Jul 22, 2015, at 1:32 PM, Remi Mayrand-Provencher <remi.mayrand-provencher at inLibro.com> wrote:
> 
> Thank you for answering so quickly!

We usually try to see if we can beat Scott.. but that rarely (if ever) happens :-)

>     <!-- Example HTTP metadata provider.  Use this if you want to download
>          the metadata from a remote service.
> 
>          You *MUST*  provider the SignatureValidationFilter in order to function securely.
>          Get the PubLic key, and validate it via some out of band mechanism, from the
>          party publishing the metadata
> 
>          The EntityRoleWhiteList saves memory by only loading metadata from entity types
>          that you will interoperate with.
> 
>     <MetadataProvider id="HTTPMetadata"
>                       xsi:type="FileBackedHTTPMetadataProvider"
>                       backingFile="/opt/shibboleth-idp/metadata/testshib-providers.xml"
>                       metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"/>
> 
>         <MetadataFilter xsi:type="SignatureValidation"
>             requireSignedMetadata="false">
>             <PublicKey>
>                 THIS IS AN EXAMPLE
> 
>                 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg0TyQAP/tIvOH89EtaX
>                 uRRn8SYzTj7W1TbNY4VvBmobjkRmSkki4hH9x4sQpi635wn6WtXTN/FNNmkTK3N/
>                 LspmBWxfZS+n+cc7I82E5yvCAPX67QsZgqgglp2W5dvK/FsMMCS6X6SVqzBLMP88
>                 NenXKxY+HMxMs0sT0UKYh1cAEqadrHRBO65aDBcm5a0sBVYt9K6pgaOHrp/zSIbh
>                 nR5tFFLjBbtFktDpHL3AdGBH3OYidNGKBO3tJ3Ms7LeKXsM0+0Y4P+9fHZINL2X3
>                 E2N6GVnKs5PZTg9sP0FtIpAbYm/+zCx7Yj1ET/Er8mDd6tNVGSQsn9s5xUBwGqn1
>                 4wIDAQAB
>             </PublicKey>
>         </MetadataFilter>
>         <MetadataFilter xsi:type="EntityRoleWhiteList">
> <RetainedRole>md:SPSSODescriptor</RetainedRole>
>         </MetadataFilter>
> 
>     </MetadataProvider>
> 
>     -->


If the above is what you are loading then you are not loading metadata from TestShib. Your <MetadataProvider> is still commented out as in you are not using it. 
Also remove the signature stuff if you are using MD from TestShib .. 



--------
thanks
 kevin.foote