IModules doesn't work in IDP 3

[Hong Ye]

Hi,

Cornell’s iModules application works fine in IDP 2, but not IDP 3. Here is the error in the IDP log:
2015-09-08 10:00:31,599|128.253.101.159 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:505] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest
2015-09-08 10:00:31,600|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:220] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService
2015-09-08 10:00:31,601|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:126] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Candidate endpoint location did not match https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2
2015-09-08 10:00:31,601|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:130] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: No candidate endpoints met criteria
2015-09-08 10:00:31,601|128.253.101.159 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:402] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint

In the metadata, the end point of assertionConsumerService is little different than the AssertionConsumerServiceURL(https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2) in the AuthnRequest. Is this difference causing the problem? Does it need to be fixed on the vendor site? Since it works in IDP 2, I would like to confirm with the expert here before I bring it up to the vendor.

 <md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717" index="1”/>


Thanks,
Hong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150908/87ef8fd3/attachment-0001.html>