Shibboleth Configuration

[Prabhu Rajendran]

Thanks Martin.


Do we need to configure relying party as mandatory on configuration of
Shibboleth as SP?

My IdP throws below error as "SAML 2 SSO profile is not configured for
relying party"

I had configured only shibboleth2.xml and NO relying-party.xml is Added.


*ERROR*
No custom relying party configuration found for
https://verizonmob.payoda.com/shibboleth, looking up configuration based on
metadata groups.
12:49:24.873 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157]
- No custom or group-based relying party configuration found for
https://{hostname}/shibboleth.
Using default relying party configuration.
12:49:24.876 - WARN
[org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] -
SPSSODescriptor role metadata for entityID 'https://{hostname}/shibboleth'
could not be resolved
12:49:24.881 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:387]
- Decoded request from relying party 'https://{hostname}/shibboleth'
12:49:24.882 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:305]
- No metadata for relying party https://{hostname}/shibboleth, treating
party as anonymous
12:49:24.886 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:222]
- SAML 2 SSO profile is not configured for relying party https://
{hostname}/shibboleth
12:49:24.950 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:339] -
LoginContext key cookie was not present in request
12:49:24.950 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No
relying party, nothing to display


Thanks & Regards,
Prabhu Rajendran

On Wed, Jun 10, 2015 at 1:00 PM, Martin Haase <Martin.Haase at daasi.de> wrote:

>  Prabhu,
>
> so it is the TestShib IdP saying this? Then there should be something for
> you to be found in
> https://idp.testshib.org/cgi-bin/idplog.cgi?lines=1500&logname=idp-process.log
> after you will have tried it again. Also be sure to check
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors
>
> Regards,
> Martin
>
>
> Am 10.06.2015 um 08:57 schrieb Prabhu Rajendran:
>
> Martin,
>
> Its configured to current UTC time.. But still same error...
>
>   Thanks & Regards,
>  Prabhu Rajendran
>
> On Wed, Jun 10, 2015 at 12:21 PM, Martin Haase <Martin.Haase at daasi.de>
> wrote:
>
>>  Prabhu,
>> check your system's time, it must be current.
>> Regards,
>> Martin
>>
>>
>> Am 10.06.2015 um 06:34 schrieb Prabhu Rajendran:
>>
>>   Hi All,
>>
>>
>>  We tried to install Shibboleth SP and test it using testshib.org.
>>
>>  On hitting https://{our hostname}/shibboleth  or  https://{our
>> hostname}/secure
>>  it redirects to testshib.org/idp/...
>>
>>  But throws error as "*Message did not meet security requirements"*
>>
>>
>>
>>   Thanks & Regards,
>>  Prabhu Rajendran
>>
>>
>>
>>  --
>> Dr. Martin Haase, Solutions Engineer
>>
>> DAASI International GmbH
>> Europaplatz 3
>> D-72072 Tübingen
>> Germany
>>
>> phone: +49 7071 407109-6
>> fax:   +49 7071 407109-9
>> email: martin.haase at daasi.de
>> web:   www.daasi.de
>>
>> Sitz der Gesellschaft: Tübingen
>> Registergericht: Amtsgericht Stuttgart, HRB 382175
>> Geschäftsleitung: Peter Gietz
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
>
>
> --
> Dr. Martin Haase, Solutions Engineer
>
> DAASI International GmbH
> Europaplatz 3
> D-72072 Tübingen
> Germany
>
> phone: +49 7071 407109-6
> fax:   +49 7071 407109-9
> email: martin.haase at daasi.de
> web:   www.daasi.de
>
> Sitz der Gesellschaft: Tübingen
> Registergericht: Amtsgericht Stuttgart, HRB 382175
> Geschäftsleitung: Peter Gietz
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150610/1285fced/attachment.html>