SPSSODescriptor role metadata issue
Peter Schober
peter.schober at univie.ac.at
Mon Jun 29 12:11:02 EDT 2015
* Luke Adams <ladams at charlottelaw.edu> [2015-06-29 17:52]:
> Can you assist me with a Shibboleth issue I’m having. A test SP has
> been setup at Orgsync and it points to my IdP:
> https://clt-idp.charlottelaw.edu/idp/shibboleth. This is my relying
> party information for OrgSync:
>
> <metadata:MetadataProvider id="https://orgsync.com/shibboleth-sp" xsi:type="metadata:FileBackedHTTPMetadataProvider"
> metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
> backingFile="C:\Program Files (x86)\Internet2\Shib2Idp/metadata/InCommon-metadata.xml"
> />
> </metadata:MetadataProvider>
Note that that's not a secure/trustworthy method to inguest SAML
metadata from the InCommon federation. InCommon certainly provides
documentation on how to do that, so follow that.
> 11:12:55.342 - WARN [org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] - SPSSODescriptor role metadata for entityID 'https://orgsync.com/shibboleth-sp' could not be resolved
> 11:12:55.342 - WARN [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:305] - No metadata for relying party https://orgsync.com/shibboleth-sp, treating party as anonymous
The metadata at the above metadataURL does (also) contain SAML
metadata for that entity, and includes a SPSSODescriptor role.
Can you access other SPs registered witih InCommon?
Can you find the orgsync SP's metadata in the backingFile you
configured above?
-peter
More information about the users
mailing list