Login Authentication page for shibboleth IDP

[Santu Ghosh]

Hi David,

Thanks for your response.

- you did not register the SP in your IdP (i.e. load metadata of the SP)
     This is working fine if we test SP initiated flow

-the entityID in your URL does not match the entityID in the metadata file
- you did add the metadata but forgot to reload the MetadataResolverService
(or just restart Tomcat/Jetty)

    We have done above mentioned two steps every time when we made any
changed (if necessary) in xml.


Our IDP metadata looks like :

<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="
http://www.w3.org/2000/09/xmldsig#"
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="
https://idp.xxxxxxxx.com/idp/shibboleth">


And SP metadata looks like :


<?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
ID="https___shibboleth-sp.xxxxxxx.com_shibboleth-sp" entityID="
https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp"><ds:Signature xmlns:ds="
http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference
URI="#https___shibboleth-sp.xxxxxxx.com_shibboleth-sp"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1
"/><ds:DigestValue>OreU/14CANZdlXlhfpOdBwvjv3E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>I0g7LWoPmja4lyu/9H


Can you please take a look.

Snahasish
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171120/9954d9dc/attachment.html>