BindingException with SAML2

[Cantor, Scott]

On 5/31/17, 2:59 AM, "users on behalf of Rafal Lalik" <users-bounces at shibboleth.net on behalf of rafal.lalik at ph.tum.de> wrote:

> I reviewed all my configuration and all looks good, I don't know what is the problem.

The thread you found refers to a number of client-side considerations that apparently can cause a correctly issued response via POST to turn into a GET at the last minute and fail, but those have nothing to do with either the IdP or the SP. If that isn't the problem, then the IdP is apparently broken.

Without a trace to see what kind of message it's sending to the SP, there's nothing else I can tell you about the cause. There's no simple mistake with the SP that could cause it. If the metadata in the IdP were fouled up such that the POST endpoint were associated with the artifact binding, I suppose that's a possible explanation, but this is all just speculation and there's no obvious reason that would happen.

Basic SAML working knowledge is a general prereq to diagnosing these kinds of problems.

-- Scott