OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Cantor, Scott]

> I have modified the metadata to include the following nodes a)
> <init:RequestInitiator> b) <md:ArtifactResolutionService> c)
> <md:SingleLogoutService> d) <md:AssertionConsumerService> for each of
> the micro sites (in addition to the top-level site).

I don't think anybody understands what you mean by "micro-site". If you're talking about vhosting, that's a different kind of scenario from what I thought you meant.

> Now, when I try to login from a micro site, I'm getting error " Binding
> Exception SAML message delivered with POST to incorrect server URL"

Then your web server is not set up correctly (Shibboleth aside). It does not know its own virtual host identity. You're virtualizing the host, port, or scheme and not handling that in the web configuration.

> SAML Request
> <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> 
> AssertionConsumerServiceURL="https://jama.amadev.silverchair.com/Shibb
> oleth.sso/SAML2/POST"

That's the URL you're asking for a response on. The server believes its vhost identity is something else.

-- Scott