"The application you have accessed is not registered for use with this service." while testing shibboleth-idp on testshib

[Remi Mayrand-Provencher]

Thanks a lot!
On 15-07-22 04:52 PM, Kevin Foote wrote:
>> On Jul 22, 2015, at 1:32 PM, Remi Mayrand-Provencher <remi.mayrand-provencher at inLibro.com> wrote:
>>
>> Thank you for answering so quickly!
> We usually try to see if we can beat Scott.. but that rarely (if ever) happens :-)
>
>>      <!-- Example HTTP metadata provider.  Use this if you want to download
>>           the metadata from a remote service.
>>
>>           You *MUST*  provider the SignatureValidationFilter in order to function securely.
>>           Get the PubLic key, and validate it via some out of band mechanism, from the
>>           party publishing the metadata
>>
>>           The EntityRoleWhiteList saves memory by only loading metadata from entity types
>>           that you will interoperate with.
>>
>>      <MetadataProvider id="HTTPMetadata"
>>                        xsi:type="FileBackedHTTPMetadataProvider"
>>                        backingFile="/opt/shibboleth-idp/metadata/testshib-providers.xml"
>>                        metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"/>
>>
>>          <MetadataFilter xsi:type="SignatureValidation"
>>              requireSignedMetadata="false">
>>              <PublicKey>
>>                  THIS IS AN EXAMPLE
>>
>>                  MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg0TyQAP/tIvOH89EtaX
>>                  uRRn8SYzTj7W1TbNY4VvBmobjkRmSkki4hH9x4sQpi635wn6WtXTN/FNNmkTK3N/
>>                  LspmBWxfZS+n+cc7I82E5yvCAPX67QsZgqgglp2W5dvK/FsMMCS6X6SVqzBLMP88
>>                  NenXKxY+HMxMs0sT0UKYh1cAEqadrHRBO65aDBcm5a0sBVYt9K6pgaOHrp/zSIbh
>>                  nR5tFFLjBbtFktDpHL3AdGBH3OYidNGKBO3tJ3Ms7LeKXsM0+0Y4P+9fHZINL2X3
>>                  E2N6GVnKs5PZTg9sP0FtIpAbYm/+zCx7Yj1ET/Er8mDd6tNVGSQsn9s5xUBwGqn1
>>                  4wIDAQAB
>>              </PublicKey>
>>          </MetadataFilter>
>>          <MetadataFilter xsi:type="EntityRoleWhiteList">
>> <RetainedRole>md:SPSSODescriptor</RetainedRole>
>>          </MetadataFilter>
>>
>>      </MetadataProvider>
>>
>>      -->
>
> If the above is what you are loading then you are not loading metadata from TestShib. Your <MetadataProvider> is still commented out as in you are not using it.
> Also remove the signature stuff if you are using MD from TestShib ..
>
>
>
> --------
> thanks
>   kevin.foote