relying-party.xml in V3/unsolicitedSSO

[Nickles, Brent]

I'm attempting UnsolicitedSSO and I'm different issues in both development and production:
in development the ACS I'm getting the following (perhaps the space in ?c=umb test)

2016-08-30 12:36:39,254 - WARN [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:182] - Profile Action WebFlowMessageHandlerAdaptor: Exception handling message
org.opensaml.messaging.handler.MessageHandlerException: Could not obtain SAML destination endpoint URL from message context
        at org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler.doInvoke(SAMLOutboundDestinationHandler.java:66)
Caused by: org.opensaml.saml.common.binding.BindingException: The endpoint location http://webtma-dev.umaryland.edu/tmalogin/samlservice.aspx?c=umb test is not a valid URL
        at org.opensaml.saml.common.binding.SAMLBindingSupport.getEndpointURL(SAMLBindingSupport.java:145)
Caused by: java.net.URISyntaxException: Illegal character in query at index 63: http://webtma-dev.umaryland.edu/tmalogin/samlservice.aspx?c=umb test
        at java.net.URI$Parser.fail(URI.java:2848)

production doesn't have the space in the samlservice.aspx, it's simply samlservice.aspx?c=umb

I have the following in the relying-party.xml for version 2.x; I'm trying to convert to a 3.x.    I'm hoping it's simply replicating the signResponses="always" but that seem to fail as well.  Is this where the custom bean comes into play?  Any thoughts?    Thanks


The application is reporting:  [SSOException: Failed to verify the XML signature.]

<RelyingParty id="webtma.umaryland.edu/sp" provider="https://webauth.umaryland.edu/idp/shibboleth"
            defaultSigningCredentialRef="IdPCredential"
            defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport">
        <ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
                                signResponses="always" encryptAssertions="never"/>
        <ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" />
        <ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" />
    </RelyingParty>

--------------------------------------------

        <bean parent="RelyingPartyByName" c:relyingPartyIds="webtma.umaryland.edu/sp">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO"  p:encryptAssertions="false" />
                </list>
            </property>
        </bean>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160830/f05a3e73/attachment-0001.html>