Error: Unable to locate a SAML 2.0 ACS endpoint to use for response

[aivanov100]

Hi Peter,

Thank you for your response.  First, let me answer your questions.  The IdP
is new, the SP was previously configured for a different application, and
some of those settings made it into this shibboleth2.xml configuration. 
This was the reason for the attributePrefix="AJP_".  Some of the changes
made to shibboleth2.xml were indeed copy/pasted from different examples, as
I was trying to resolve the error.  We are now running the latest stable
version of the Shibboleth SP (2.5.6)

I've gotten past the error I had previously.  I took your advice and started
with a clean, default Shibboleth SP configuration.  Using minimal changes to
the default file, we were able to successfully establish an SSO Session
between the IdP and SP.  After authenticating through the IdP I can see that
there is an active SSO Session when I navigate to:
https://stage.qdr.org/Shibboleth.sso/Session.  

The problem is that this configuration does not seem to be working with
Drupal.. it must not be what the application expects.  The Drupal
application does not recognize that I am authenticated.  It does not help
that documentation for the Drupal shib_auth module is outdated, and the
recommended configurations for shibboleth2.xml are based on an old version
of the Shibboleth SP.  Here is the configuration guide for the Drupal
module:
https://wiki.aai.niif.hu/index.php?title=DrupalShibbolethReadmeDev

As you can see in that guide, their config example uses the
<SessionInitiator> tag.  Your comment was "You shouldn't need any of those
settings with recent/current software."  OK then, how can I configure my SP
to function just like the SP described in that documentation?  I'm trying to
figure out why there is a disconnect between the Drupal application and the
SP, because the SP says that the user is authenticated but Drupal does not
see it that way.

I'm attaching my current shibboleth2.xml file.  Please let me know if you
have any further suggestions.

Thanks a lot,
Alex

shibboleth2.xml
<http://shibboleth.1660669.n2.nabble.com/file/n7628490/shibboleth2.xml>  





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Error-Unable-to-locate-a-SAML-2-0-ACS-endpoint-to-use-for-response-tp7628164p7628490.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.