retrieving the SAML assertion w/ the SP

[Liam Hoekenga]

I'm trying to make the SAML assertion available to the webserver.

My shibboleth2.xml has...

<Host name="testsp.example.edu">
    <Path name="secure" authType="shibboleth" requireSession="true"
exportAssertion="true"/>
</Host>
...
...
<Sessions lifetime="28800" timeout="3600" checkAddress="false"
handlerURL="/Shibboleth.sso" handlerSSL="true" cookieProps="https"
relayState="ss:mem" exportLocation="
https://localhost/Shibboleth.sso/GetAssertion" exportACL="127.0.0.1 ::1"
idpHistory="false" idpHistoryDays="7">

and my apache configuration has...

<Location /secure/>
    AuthType shibboleth
    ShibRequestSetting requireSession 1
    ShibExportAssertion On
    require valid-user
</Location>

The SP is on my laptop, and I'm accessing it locally.  Everything appears
to be working, except for assertion exposure.  Shib-Assertion-Count gets
set to "00", and there's no corresponding "Shib-Assertion-00" variable.

I can access the exportLocation - it just tells me "Assertion lookup
failed".
I've tried using localhost, 127.0.0.1 and the machine's actual DNS name as
the hostname in the exportLocation.

I'm using apache 2.4.9 on OSX 10.10, w/ shib sp 2.5.3.  I've tried it both
against IdP v3.x, and SimpleSAMLphp 1.13.x

I'm not sure what I'm missing.  Any suggestions?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150318/c83622b5/attachment.html