BindingException with SAML2

Cantor, Scott cantor.2 at
Wed May 31 11:40:12 EDT 2017

On 5/31/17, 2:59 AM, "users on behalf of Rafal Lalik" <users-bounces at on behalf of rafal.lalik at> wrote:

> I reviewed all my configuration and all looks good, I don't know what is the problem.

The thread you found refers to a number of client-side considerations that apparently can cause a correctly issued response via POST to turn into a GET at the last minute and fail, but those have nothing to do with either the IdP or the SP. If that isn't the problem, then the IdP is apparently broken.

Without a trace to see what kind of message it's sending to the SP, there's nothing else I can tell you about the cause. There's no simple mistake with the SP that could cause it. If the metadata in the IdP were fouled up such that the POST endpoint were associated with the artifact binding, I suppose that's a possible explanation, but this is all just speculation and there's no obvious reason that would happen.

Basic SAML working knowledge is a general prereq to diagnosing these kinds of problems.

-- Scott

More information about the users mailing list