IDP does not find RP Metadata

Brent Putman putmanb at georgetown.edu
Mon Mar 20 12:22:01 EDT 2017



On 3/20/17 7:43 AM, Ioannis Kakavas wrote:
> Strangely enough, we are experiencing the same exactly issue today with
> an IdP ( shibboleth IdP v3.3.0) in our federation. 

The OP's problem was due to a mismatch/typo in the entityID. Nothing else.

> The behavior is
> exactly as Reiner describes, we can manually grep the ID of the SP in
> the cached metadata (and the live online document ) with an SPSSO role
> and the DEBUG log is as follows

Well, the answer is going to be the same:  if the metadata lookup says
that it's not there, then well, it's not there.  Either you have a
similar issue with a wrong/typo-ed entityID, or the metadata that
you're looking at isn't actually loaded into memory.  Or something
similar to that.

> 2017-02-23 11:50:52,961 - INFO
> [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128] -
> 		Message Handler:  No metadata returned for
> https://archives.heal-link.gr/shibboleth in role
> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol
> urn:oasis:names:tc:SAML:2.0:protocol
>
>

There's no mystery: the entityID
'https://archives.heal-link.gr/shibboleth' doesn't exist in the live
metadata with that role and protocol.  Check spelling, lower vs upper
case issues, trailing slash, etc.  The entityID has to be exactly that
string.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170320/2077c783/attachment-0001.html>


More information about the users mailing list