Unable to locate a SAML 2.0 ACS endpoint to use for response

Cantor, Scott cantor.2 at osu.edu
Sat Jun 17 00:15:01 EDT 2017


On 6/15/17, 9:49 PM, "users on behalf of Mr. Christopher Bland" <users-bounces at shibboleth.net on behalf of chris at fdu.edu> wrote:

> My config looks like this

You've put in all kinds of manual, unnecessary material inside the <Sessions> element in place of the proper way to configure an SP, which is handled now with the simple <SSO> and <Logout> elements that auto-configure a lot of the machinery that used to be done by hand. Having removed those, you've put in some of the manual bits but left out all the AssertionConsumerService elements, for example, which is certainly why it's breaking.

I don't know what example you're following, but it isn't anything recent. The SP ships with the right examples, and they use the <SSO> element now to auto-establish all the endpoints.

If you're under the impression you need to do this because of the ODBC thing, you don't, you can override the relayState setting inside the <Sessions> element.

I can't imagine why you'd need to use ODBC for the relay state though, if you can't do it in memory, I'd just go back to cookies.

-- Scott




More information about the users mailing list