error when test idp 3.2.1
HyperV
HyperV at asroma.it
Wed Sep 21 10:50:12 EDT 2016
Hi All
After followed all procedure described on testshib.org
? Register
o Upload idp-metadata.xml (named idp.metadatacesia.xml)
? <Configure (as IDP)
o Followed step by step
? Test (AS IdP) at https://sp.testshib.org/ with entity ID idp.garr.example.it
But this is the result
Web Login Service - Unsupported Request
The application you have accessed is not registered for use with this service.
Can you help us?
Our server has installed
We've ubuntu 14.04
Apache 2
Jetty 9.3
Shibboleth 3.2.1
My SQL
Below the response after uploaded idp.metadatacesia.xml file in order to register our IDP
<!--
This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.garr.example.it/idp/shibboleth">
<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<Extensions>
<shibmd:Scope regexp="false">garr.example.it</shibmd:Scope>
<!--
Fill in the details for your IdP here
<mdui:UIInfo>
<mdui:DisplayName xml:lang="en">A Name for the IdP at idp.garr.example.it</mdui:DisplayName>
<mdui:Description xml:lang="en">Enter a description of your IdP at idp.garr.example.it</mdui:Description>
<mdui:Logo height="80" width="80">https:// idp.garr.example.it/Path/To/Logo.png</mdui:Logo>
</mdui:UIInfo>
-->
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.garr.example.it:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/> -->
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.garr.example.it:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<!--
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https:// idp.garr.example.it/idp/profile/SAML2/Redirect/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https:// idp.garr.example.it/idp/profile/SAML2/POST/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https:// idp.garr.example.it/idp/profile/SAML2/POST-SimpleSign/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https:// idp.garr.example.it:8443/idp/profile/SAML2/SOAP/SLO"/>
-->
<!--<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat> -->
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<!-- <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.garr.example.it/idp/profile/Shibboleth/SSO"/> -->
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.garr.example.it/idp/profile/SAML2/POST/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.garr.example.it/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.garr.example.it/idp/profile/SAML2/Redirect/SSO"/>
</IDPSSODescriptor>
<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<Extensions>
<shibmd:Scope regexp="false">garr.example.it</shibmd:Scope>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<!-- <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.garr.example.it/idp/profile/SAML1/SOAP/AttributeQuery"/> -->
<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.garr.example.it:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
<!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->
</AttributeAuthorityDescriptor>
</EntityDescriptor>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160921/35fa621c/attachment-0001.html>
More information about the users
mailing list