Help with SAML and TestShib

[John Legg]

Hello everyone,

I’ve been tasked with setting up SAML with my organization’s implementation of CloudFoundry’s UAA (User Account and Authentication Server) and test it using TestShib. Unfortunately, I’m not very familiar with how these technologies work, so I’m having some trouble debugging.

I’ve already registered our metadata file (attached) with TestShib and now after navigating to my organization’s login page, clicking the external TestShib login link, and logging in via TestShib, I get the following error:

“No peer endpoint available to which to send SAML response”

When looking at the TestShib logs, I see the following error (full log attached):

10:44:02.683 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447] - No return endpoint available for relying party cloudfoundry-saml-login

I did some digging on the internet as well as the archived Shibboleth mailing lists, and nothing I tried seemed to solve this. As far as I can tell, the ACS endpoints seem to match up and they’re referring to the correct address.

Any idea what I might be doing wrong? Let me know if you need more information!

Thanks,

John






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/3dcf65df/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: spring_saml_metadata_101042465.xml
Type: application/xml
Size: 3912 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/3dcf65df/attachment.wsdl>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/3dcf65df/attachment-0001.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: TestShibLog.txt
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/3dcf65df/attachment.txt>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/3dcf65df/attachment-0002.html>