What could be the ACSUrl to build AuthRequest

[Chauhan, Somya (ELS-CON)]

Hi,

I am working on making an attribute query request from SP. I am using the  JavaAPI  for Attribute query request .

SP have shared the self signed certificate to Idp . Idp is expecting some fingerprint value to have successful ssl/tls connection. That fingerprint value seems to be the serial number of the ssl certificate shared.

We are passing the same self-signed certificate along with sp-key.pem  in the request and framing the soap envelope.
To  buildAuthRequest(IssuerUrl, AssertionConsumerServiceUrl, Boolean forceAuth) we are passing these parameters.
For AssertionConsumerServiceUrl, we are passing the Location  value (/saml2/Post) which is available in SP Metadata AssertionConsumerService Binding: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST

I am not sure whether the AssertionConsumerServiceUrl what we are passing is correct.

If the above mentioned way is not correct , where can we look for it and do we need to configure in metadata as well?

Can  someone provide some information what should be the  ASCUrl we should pass?



Thanks,
Somya

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170620/e67976a6/attachment-0001.html>