Adding first IDP to Service Provider error

[Remi Mayrand-Provencher]

I finally got both my service provider and my Identity Provider working 
with testshib so now it is time to make them work together. According to 
the documentation, I think the only changes I need to make are in 
shibboleth2.xml to be able to make a basic test. I've tried to link my 
idp to my sp by modifying those next few things in my shibboleth2.xml 
file, where "https://test-idp-remi/idp/shibboleth" is my idp's entityID.

<SSO entityID="*https://test-idp-remi/idp/shibboleth*">
                 SAML2 SAML1
</SSO>

<MetadataProvider type="XML" uri="*https://test-idp-remi/idp/shibboleth*"
              backingFilePath="testRemi-tshib-two-idp-metadata.xml" 
reloadInterval="180000" />

Still, when I try to reach kohaprod.inlibro.net/Shibboleth.sso/Login, 
all I get is this :


opensaml::saml2md::MetadataException at 
(http://kohaprod.inlibro.net/Shibboleth.sso/Login)

Unable to locate metadata for identity provider 
(https://test-idp-remi/idp/shibboleth)


Here is my complete shibboleth2.xml file, if it helps. I took the one 
from testshib since I just want to try to be redirected to my idp.


<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config" 
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     clockSkew="1800">

     <!-- The entityID is the name TestShib made for your SP. -->
     <ApplicationDefaults entityID="https://kohaprod.inlibro.net/shibboleth"
         REMOTE_USER="eppn">

         <!-- You should use secure cookies if at all possible. See 
cookieProps in this Wiki article. -->
         <!-- 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions -->
         <Sessions lifetime="28800" timeout="3600" checkAddress="false" 
relayState="ss:mem" handlerSSL="false">

             <!-- Triggers a login request directly to the TestShib IdP. -->
             <!-- 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO -->
             <SSO entityID="https://test-idp-remi/idp/shibboleth">
                 SAML2 SAML1
             </SSO>

             <!-- SAML and local-only logout. -->
             <!-- 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceLogout 
-->
             <Logout>SAML2 Local</Logout>

             <!--
                 Handlers allow you to interact with the SP and gather 
more information.  Try them out!
                 Attribute values received by the SP through SAML will 
be visible at:
                 http://kohaprod.inlibro.net/Shibboleth.sso/Session
             -->

             <!-- Extension service that generates "approximate" 
metadata based on SP configuration. -->
             <Handler type="MetadataGenerator" Location="/Metadata" 
signing="false"/>

             <!-- Status reporting service. -->
             <Handler type="Status" Location="/Status" acl="127.0.0.1"/>

             <!-- Session diagnostic service. -->
             <Handler type="Session" Location="/Session" 
showAttributeValues="true"/>

             <!-- JSON feed of discovery information. -->
             <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

         </Sessions>

         <!-- Error pages to display to yourself if something goes 
horribly wrong. -->
         <Errors supportContact="remi.mayrand-provencher at inlibro.com" 
logoLocation="/shibboleth-sp/logo.jpg"
                 styleSheet="/shibboleth-sp/main.css"/>

         <!-- Loads and trusts a metadata file that describes only the 
Testshib IdP and how to communicate with it. -->
         <MetadataProvider type="XML" 
uri="https://test-idp-remi/idp/shibboleth"
              backingFilePath="testRemi-tshib-two-idp-metadata.xml" 
reloadInterval="180000" />

         <!-- Attribute and trust options you shouldn't need to change. -->
         <AttributeExtractor type="XML" validate="true" 
path="attribute-map.xml"/>
         <AttributeResolver type="Query" subjectMatch="true"/>
         <AttributeFilter type="XML" validate="true" 
path="attribute-policy.xml"/>

         <!-- Your SP generated these credentials.  They're used to talk 
to IdP's. -->
         <CredentialResolver type="File" key="sp-key.pem" 
certificate="sp-cert.pem"/>

</ApplicationDefaults>

     <!-- Security policies you shouldn't change unless you know what 
you're doing. -->
     <SecurityPolicyProvider type="XML" validate="true" 
path="security-policy.xml"/>

     <!-- Low-level configuration about protocols and bindings available 
for use. -->
     <ProtocolProvider type="XML" validate="true" reloadChanges="false" 
path="protocols.xml"/>

</SPConfig>

Are there any changes that I am missing if I want to test being 
redirected to my idp by accessing kohaprod.inlibro.net/Shibboleth.sso/Login?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150724/0a4f9cfb/attachment.html>