ApplicationOverride problem,

[Joe Edwards]

It was the apache configuration that was triggering the problem.

I was limiting the shibboleth login to a Location:

<Location /release>
  ShibRequestSetting applicationId emr

When I did not, shibd worked as expected.

<Location />
  ShibRequestSetting applicationId emr

-- Joe


On Wed, 6 Apr 2016, Cantor, Scott wrote:
> On 4/6/16, 1:35 PM, "users on behalf of Joe Edwards" <users-bounces at shibboleth.net on behalf of joee at uw.edu> wrote:
>
>> <ApplicationOverride id="emr" entityID="emr.uwmc.org">
>>     <Sessions relayState="ss:mem" handlerSSL="true" cookieProps="https">
>>         <SSO id="idp" isDefault="true" entityID="login.uwmc.org">
>
> None of those are legal entityIDs, so please fix them. EntityIDs are absolute URIs.
>
>> opensaml::FatalProfileException at (https://login.uwmc.org/Shibboleth.sso/SAML2/POST)
>
> Is that URL associated with the override? If not, then you have a pretty basic issue, your requests are being routed back to the other application. I don't know how you're producing the requests, so there's nothing else I can really say.
>
> -- Scott