Help with SAML and TestShib

[Kevin Foote]

Hi John,

I’ll take a look at the metadata processing and check things out. 
Can you send me your entityID - off list is fine.

--------
thanks
 kevin.foote

> On Jan 30, 2017, at 10:15, John Legg <jllegg at ncsu.edu> wrote:
> 
> Hello everyone,
> 
> I’ve been tasked with setting up SAML with my organization’s implementation of CloudFoundry’s UAA (User Account and Authentication Server) and test it using TestShib. Unfortunately, I’m not very familiar with how these technologies work, so I’m having some trouble debugging.
> 
> I’ve already registered our metadata file (attached) with TestShib and now after navigating to my organization’s login page, clicking the external TestShib login link, and logging in via TestShib, I get the following error:
> 
> “No peer endpoint available to which to send SAML response”
> 
> When looking at the TestShib logs, I see the following error (full log attached):
> 
> 10:44:02.683 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447] - No return endpoint available for relying party cloudfoundry-saml-login
> 
> I did some digging on the internet as well as the archived Shibboleth mailing lists, and nothing I tried seemed to solve this. As far as I can tell, the ACS endpoints seem to match up and they’re referring to the correct address.
> 
> Any idea what I might be doing wrong? Let me know if you need more information!
> 
> Thanks,
> 
> John
> 
> 
> 
> 
> <spring_saml_metadata_101042465.xml><TestShibLog.txt>