Shibboleth SAMLResponse from Apache -> Tomcat -> Third Party

[Cantor, Scott]

On 9/15/15, 3:44 PM, "users on behalf of James Paul" <users-bounces at shibboleth.net on behalf of jamesp at slalom.com> wrote:



>I followed that to a tee and I’m getting the follow error.
>
>Assertion Lookup Failed
>
>Does the GetAssertion have to be http because I’m using SSL.

It should normally be done over localhost and ideally doesn't need SSL because that would just add risk by routing it over a public interface.

That error would suggest it's connecting fine and you're just not requesting the data appropriately, but the log should show that.

FWIW, what you're doing is almost certainly inappropriate. Forwarding assertions isn't something the basic SSO profile is meant to support.

-- Scott

>