OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Manoj Kancharla]

Since I'm working on my local, I wasn't sure if the Shibboleth2.xml file was consistent with the way it is configured in our Dev environment. So, I copied the file from our Dev server and I have started to pay attention to the data stored in the shibboleth database. I notice a row in the [strings] table with context=RelayState with a value equal to the Url that I specified as the target/redirect url.

I feel like I may be closer to resolving this - any thoughts/suggestions?

Regarding the error "The DSP identifier you specified is invalid", here is the response from Eduserv: " this could primarily happen when the ACS endpoints don't match up in the SAML request (send from your SP) and the metadata that you have registered in the OAFed." Eduserv is asking me to send them the decoded SAML request to confirm this. How do I do view the decoded SAML request?

Thanks

Manoj

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, January 26, 2016 11:49 AM
To: Shib Users
Subject: RE: OpenAthens SP to Shibboleth (using OA Federation): Deep Links

> > For relayState, we're using "ss:db" (we recently switched from "ss:mem").
> Could this have anything to do with it?
> 
> Yes, this is almost certainly it.  I think the database identifiers 
> contain different characters than the in-memory identifiers, so some 
> software will [inappropriately] notice the difference.

I haven't read this thread, but using ss:name just means "generate a short token and store the underlying URL against that token as a key in the named storage service". Whether it's memory or database is irrelevant to what appears in RelayState on the wire.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net