opensaml::BindingException at (https://<domain>/Shibboleth.sso/SAML2/POST)

[Eric]

Hello all,

I've looked through the mailing list and haven't found much information
about this particular issue so I thought I'd ask a new question.

I'm using Shibboleth with the apache module as a SP and my IdP is Microsoft
ADFS leveraging SAML 2.0

When I go to https://<domain>/Shibboleth.sso/Login I'm taken to my IdP
ADFS, I complete my login and ADFS causes my browser to POST into
/Shibboleth.sso/SAML2/POST however the page returns a 500 error code stating

opensaml::BindingException
> The system encountered an error at Tue Sep 13 22:43:55 2016
> To report this problem, please contact the site administrator at admin@
> <domain>.com.
> Please include the following message in any email:
> opensaml::BindingException at (https://<domain>/Shibboleth.sso/SAML2/POST)
> Request missing SAMLRequest or SAMLResponse form parameter.


Now, I can see that my browser is making the POST request, I can see that
the SAMLResponse is included as a parameter in the request, and I can parse
out the SAMLResponse value as a valid assertion.

What's interesting is that the shibboleth transaction.log file doesn't show
a number of logged values that it would normally show

2016-09-13 22:55:36 INFO Shibboleth-TRANSACTION [7]: New session (ID: )
> with (applicationId: MyAppID) for principal from (IdP: none) at
> (ClientAddress: MyIPAddress) with (NameIdentifier: none) using (Protocol:
> urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID: )
> 2016-09-13 22:55:36 INFO Shibboleth-TRANSACTION [7]: Cached the following
> attributes with session (ID: ) for (applicationId: MyAppID) {
> 2016-09-13 22:55:36 INFO Shibboleth-TRANSACTION [7]: }


Now the ADFS config (and admittedly the shibboleth config) are copied from
an existing, working, implementation. We're trying to do a new SP with a
different domain. The only thing changed in both sides was the domain.

Anybody have any ideas on what to try?

Thanks,
Eric
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160913/766bd3cb/attachment.html>