SAML message intended destination endpoint 'http://MY_HOST/idp/profile/SAML2/POST/SSO' did not match the recipient endpoint 'http://127.0.0.1:8080/idp/profile/SAML2/POST/SSO'
eln00b
jbru0003 at synchronoss.com
Wed Mar 29 15:50:19 EDT 2017
I have a Shibbo 3 setup on one machine with the Spring Security SAML demo
project on another. I have both behind an nginx reverse proxy.
My metadata on both use the IP addresses without any port specifications but
I wind up with this message in my logs:
*ERROR
[org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:200]
- Message Handler: SAML message intended destination endpoint
'http://MY_IDP_IP_ADDRESS/idp/profile/SAML2/POST/SSO' did not match the
recipient endpoint 'http://127.0.0.1:8080/idp/profile/SAML2/POST/SSO'*
What configuration files should I be looking into in order to resolve this?
I did a grep on 127.0.0.1 and 8080 and nothing turned up in neither the IDP
nor the SP.
I also did a quick search on this on Google ( using this
<https://www.google.com/search?q=%22did+not+match+the+recipient+endpoint+%22+127.0.0.1&ie=utf-8&oe=utf-8>
) and was unable to figure out the issue. I'm hoping it's just an nginx
configuration issue and that's what I am looking into now - however, I hoped
someone here could point me in the right direction.
-----
el n00b - Trying to understand technology and help create documentation online wherever I get stuck.
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/SAML-message-intended-destination-endpoint-http-MY-HOST-idp-profile-SAML2-POST-SSO-did-not-match-the-tp7632302.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list