shibboleth 2.4 ds

[Jan Vilhuber]

I'm trying to follow these instructions here: https://wiki.shibboleth.net/confluence/display/EDS10/3.+Configuration

When I go to my protected resource, I get redirected to the proper discoveryURL from the SSO element, 

https://Mysp.foo.com/shibboleth-ds/index.html?entityID=https%3A%2F%2Fnamespace.myorg.com%2Fsaml2%2Fsp%2FMysp.foo.com.shib&return=https%3A%2F%2FMysp.foo.com%2FShibboleth.sso%2FLogin%3FSAMLDS%3D1%26target%3Dss%253Amem%253A55e40c9be5c66e2283a971683b92711b5fa73b56fd7aa8ab64b4937077143fb3

>From there it just keeps looping to the same URL over and over. I'm kind of lost. Has anyone encountered this before?

Apache config for server Mysp.foo.com (relevant snippets):

    <Location /Shibboleth.sso>
      AuthType None
      Require all granted
      SetHandler shib
    </Location>
    ProxyPass "/Shibboleth.sso" "!"

    Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
    <Location /shibboleth-sp>
        AuthType None
        Require all granted
    </Location>
    ProxyPass "/shibboleth-sp" "!"

    Alias /shibboleth-ds/idpselect_config.js /etc/shibboleth-ds/idpselect_config.js
    Alias /shibboleth-ds/idpselect.js /etc/shibboleth-ds/idpselect.js
    Alias /shibboleth-ds/idpselect.css /etc/shibboleth-ds/idpselect.css
    Alias /shibboleth-ds/index.html /etc/shibboleth-ds/index.html
    Alias /shibboleth-ds/blank.gif /etc/shibboleth-ds/blank.gif
    <Location /shibboleth-ds>
        Require all granted
        AuthType shibboleth
        ShibRequestSetting requireSession false
        require shibboleth
    </Location>
    ProxyPass "/shibboleth-ds" "!"

Shibboleth2.xml (relevant snippets):
            <SSO discoveryProtocol="SAMLDS" discoveryURL="https://Mysp.foo.com/shibboleth-ds/index.html">
               SAML2
            </SSO>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>


        <MetadataProvider validate="false" type="XML" legacyOrgNames="true" file=" idp-metadata.xml" />

And the metadata has:
  <md:OrganizationDisplayName>MyTest IDP</md:OrganizationDisplayName>

Idpselect_config.js is pretty much stock, except I added myEntityID (same behavior without it, though):
    this.alwaysShow = true;          // If true, this will show results as soon as you start typing
    this.dataSource = '/Shibboleth.sso/DiscoFeed';   // Where to get the data from
    this.defaultLanguage = 'en';     // Language to use if the browser local doesnt have a bundle
    this.defaultLogo = 'blank.gif';  // Replace with your own logo
    this.defaultLogoWidth = 1;
    this.defaultLogoHeight = 1 ;
    this.defaultReturn = null;       // If non null, then the default place to send users who are not
                                     // Approaching via the Discovery Protocol for example
    //this.defaultReturn = "https://example.org/Shibboleth.sso/DS?SAMLDS=1&target=https://example.org/secure";
    this.defaultReturnIDParam = null;
    this.helpURL = 'https://wiki.shibboleth.net/confluence/display/SHIB2/DSRoadmap';
    this.ie6Hack = null;             // An array of structures to disable when drawing the pull down (needed to
                                     // handle the ie6 z axis problem
    this.insertAtDiv = 'idpSelect';  // The div where we will insert the data
    this.maxResults = 10;            // How many results to show at once or the number at which to
                                     // start showing if alwaysShow is false
    this.myEntityID = "https://namespace.myorg.com/saml2/sp/mysp.foo.com.shib";          // If non null then this string must match the string provided in the DS parms
    this.preferredIdP = null;        // Array of entityIds to always show
    this.hiddenIdPs = null;          // Array of entityIds to delete
    this.ignoreKeywords = false;     // Do we ignore the <mdui:Keywords/> when looking for candidates
    this.showListFirst = false;      // Do we start with a list of IdPs or just the dropdown
    this.samlIdPCookieTTL = 730;     // in days
    this.setFocusTextBox = true;     // Set to false to supress focus
    this.testGUI = false;

    this.autoFollowCookie = null;  //  If you want auto-dispatch, set this to the cookie name to use
    this.autoFollowCookieTTLs = [ 1, 60, 270 ]; // Cookie life (in days).  Changing this requires changes to idp_select_languages


Jan