IDP does not find RP Metadata
Brent Putman
putmanb at georgetown.edu
Mon Mar 20 12:22:01 EDT 2017
On 3/20/17 7:43 AM, Ioannis Kakavas wrote:
> Strangely enough, we are experiencing the same exactly issue today with
> an IdP ( shibboleth IdP v3.3.0) in our federation.
The OP's problem was due to a mismatch/typo in the entityID. Nothing else.
> The behavior is
> exactly as Reiner describes, we can manually grep the ID of the SP in
> the cached metadata (and the live online document ) with an SPSSO role
> and the DEBUG log is as follows
Well, the answer is going to be the same: if the metadata lookup says
that it's not there, then well, it's not there. Either you have a
similar issue with a wrong/typo-ed entityID, or the metadata that
you're looking at isn't actually loaded into memory. Or something
similar to that.
> 2017-02-23 11:50:52,961 - INFO
> [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128] -
> Message Handler: No metadata returned for
> https://archives.heal-link.gr/shibboleth in role
> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol
> urn:oasis:names:tc:SAML:2.0:protocol
>
>
There's no mystery: the entityID
'https://archives.heal-link.gr/shibboleth' doesn't exist in the live
metadata with that role and protocol. Check spelling, lower vs upper
case issues, trailing slash, etc. The entityID has to be exactly that
string.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170320/2077c783/attachment-0001.html>
More information about the users
mailing list