OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Manoj Kancharla]

Scott, I used a wrong term. Microsite is an internal lingo - they're actually sub domains with IIS bindings. This is not vhosting.

Manoj

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, January 28, 2016 10:14 AM
To: Shib Users
Subject: RE: OpenAthens SP to Shibboleth (using OA Federation): Deep Links

> I have modified the metadata to include the following nodes a) 
> <init:RequestInitiator> b) <md:ArtifactResolutionService> c) 
> <md:SingleLogoutService> d) <md:AssertionConsumerService> for each of 
> the micro sites (in addition to the top-level site).

I don't think anybody understands what you mean by "micro-site". If you're talking about vhosting, that's a different kind of scenario from what I thought you meant.

> Now, when I try to login from a micro site, I'm getting error " 
> Binding Exception SAML message delivered with POST to incorrect server URL"

Then your web server is not set up correctly (Shibboleth aside). It does not know its own virtual host identity. You're virtualizing the host, port, or scheme and not handling that in the web configuration.

> SAML Request
> <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> 
> AssertionConsumerServiceURL="https://jama.amadev.silverchair.com/Shibb
> oleth.sso/SAML2/POST"

That's the URL you're asking for a response on. The server believes its vhost identity is something else.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net