Metadata document did not contain a descriptor for entity

[Brent Putman]

On 11/3/16 12:20 PM, rune.piselli at eleven-project.it wrote:
> Hi,
>
>
> 2016-11-03 17:03:06,094 - DEBUG
> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198]
> - Metadata document did not contain a descriptor for entity
> http://sp.mysaml.org/Shibboleth.sso
> 2016-11-03 17:03:06,094 - DEBUG
> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281]
> - Metadata document did not contain any role descriptors of type
> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for entity
> http://sp.mysaml.org/Shibboleth.sso
> 2016-11-03 17:03:06,094 - DEBUG
> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252]
> - Metadata document does not contain a role of type
> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting
> protocol urn:oasis:names:tc:SAML:2.0:protocol for entity
> http://sp.mysaml.org/Shibboleth.sso
> 2016-11-03 17:03:06,094 - INFO
> [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128]
> - Message Handler:  No metadata returned for
> http://sp.mysaml.org/Shibboleth.sso in role
> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol
> urn:oasis:names:tc:SAML:2.0:protocol
>
>
>


> Now the part that I can't Understand is why it complains about
> Metadata document did not contain a descriptor for entity
> http://sp.mysaml.org/Shibboleth.sso. when the returned metadata follows:
>
>  
> <!--
> This is example metadata only. Do *NOT* supply it as is without review,
> and do *NOT* provide it in real time to your partners.
>  -->
> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
> ID="_c76cd6d29798e4a6764fcb6c29d66697eb5d6ddf"
> entityID="http://sp.mysaml.org/Shibboleth.sso">
>

Are those sp.mysaml.org values the literal values in use here, or have
you edited the email to obfuscate your real domain names, etc?  If so,
triple check that you don't have a typo in the entityID in the metadata
vs the SP config.  The strings have to match *exactly*, including
upper/lower case, trailing slash, etc.

>
> What's wrong?

Assuming no typo in entityIDs, then the only other explanation is that
you aren't actually successfully loading the SP's metadata.  Look at
your logs from early in the IdP start process to see if you have errors
from the metadata provider configuration, or something like that.  Or
if you don't see errors, confirm that you actually have configured a
metadata provider with that SP's metadata, i.e. it's not commented out,
etc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161103/aa3904b9/attachment.html>