Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.

[Cahill, Charles (GE Appliances)]

I don't see the entityID coming into any of the available logs.  Seems like it must not be reading the metadata that I have created
properly or I have not provided the proper SSO Logon URL to PagerDuty.

How am I supposed to get an "ID" entry to put in front of the "EntityID" entry if I am making up the metadata by hand?

I provided fssfedidpdev .al. ge.com/idp/profile/SAML2/Redirect/SSO
Preceded by https as the SSO Login URL to PagerDuty along with a copy of my IDP cert.

Totally crazy this thing is to hook up to a 3rd party SAML 2.0 service.

If you install the Shibboleth SP then it's no problem.



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Monday, June 01, 2015 3:14 PM
To: users at shibboleth.net
Subject: Re: Issues getting PagerDuty which uses SAML 2.0 to talk to Shibboleth IDP.

a* Cahill, Charles (GE Appliances) <Charles.Cahill at ge.com> [2015-06-01 20:56]:
> I understand it and have added it to my "gealidp.xml" metadata file.
> 
> Which currently contains multiple Entity Desriptors.
> 
> I am still getting the Relying Party not found error though in the 
> logs for my container.

Container logs are not sufficient. The Shibboleth IDP will write its own detailed log files, by default to $IDP_HOME/logs/idp-process.log

That's where you'd take the entityID for the SP from (or from the browser). I've said that before, of course.
If that is unclear or you have questions you'll need to ask. Otherwise this will go on in circles. If you're absolutely certain the entityID you used on your bespoke EntityDescriptor matches what's in the log for that SP, verbatim, bit for bit, then the metadata likely isn't read.
Check the IDP's log for any WARN or ERROR messages. E.g. if the metadata isn't valid the IDP will also ignore it (along with other SPs in that metadata document).
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net