Login Authentication page for shibboleth IDP

[David Huebner]

Since you are masking all the relevant URLs please make sure that the 
entityID in the metadata exactly matches the one you try to initiate SSO 
with.

Oh and you probably have to URL-encode the entityID when requesting SSO.

Refer to the examples in 
https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration


On 20.11.2017 15:52, Santu Ghosh wrote:
> Hi David,
>
> Thanks for your response.
>
> - you did not register the SP in your IdP (i.e. load metadata of the SP)
>    This is working fine if we test SP initiated flow
>
> -the entityID in your URL does not match the entityID in the metadata file
> - you did add the metadata but forgot to reload the 
> MetadataResolverService (or just restart Tomcat/Jetty)
>
>     We have done above mentioned two steps every time when we made any 
> changed (if necessary) in xml.
>
>
> Our IDP metadata looks like :
>
> <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
> xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
> xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
> entityID="https://idp.xxxxxxxx.com/idp/shibboleth">
>
>
> And SP metadata looks like :
>
>
> <?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor 
> xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
> ID="https___shibboleth-sp.xxxxxxx.com_shibboleth-sp" 
> entityID="https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp"><ds:Signature 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod 
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod 
> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference 
> URI="#https___shibboleth-sp.xxxxxxx.com_shibboleth-sp"><ds:Transforms><ds:Transform 
> Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform 
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod 
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>OreU/14CANZdlXlhfpOdBwvjv3E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>I0g7LWoPmja4lyu/9H
>
>
> Can you please take a look.
>
> Snahasish
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171120/effbebde/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2269 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20171120/effbebde/attachment-0001.p7s>