Incoming binding urn:oasis:names:tc:SAML:2.0:bindings:SOAP is not enabled for (SP) :::

[Pruvost, Christian (ELS-OXF)]

Yes, that's what I mean. But I think the answer I received directly clearly point to what I suspected.
A misconfiguration in SP metadata for that IDP  or the IDP not being configured for such binding with our SP...

So I need to follow up with the IDP folks.

(...)
as the error message says, the IdP doesn't have a SOAP endpoint location for the SP -  check your SP metadata etc to ensure
you have one existing and then ensure that the IdP has that line entry for your SP entity - this will have to be done for every IdP (which is
where federations come in useful as you just update your metadata in the main metadata file and all IdPs get updated
(...)


Cheers,
Christian.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: 22 November 2017 13:48
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: Incoming binding urn:oasis:names:tc:SAML:2.0:bindings:SOAP is not enabled for (SP) :::

*** External email: use caution ***



I'm a bit confused here

> . We have a working SAML2 Service Provider working hundreds of IDP

Do you mean a Shibboleth SP?

>
> <S11:Envelope
> xmlns:S11="http://schemas.xmlsoap.org/soap/envelope/"><S11:Body>
> <S11:Fault><faultcode
> xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">soapenv:Serv
> er</faultcode> <faultstring>Incoming binding
> urn:oasis:names:tc:SAML:2.0:bindings:SOAP is not enabled for (SP) :::
https://sdauth.sciencedirect.com/</faultstring></S11:Fault></S11:Body></S11:Envelope>

Well that's coming from the IdP.  And AFAICS in the code, no (current) Shibboleth IdP would generate that string.  So I would guess that it is incumbent on the people running the IdP to fix something.  It is also interesting that they chose to not push the encrypted attributes to you.

/R

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

________________________________

Elsevier Limited. Registered Office: The Boulevard, Langford Lane, Kidlington, Oxford, OX5 1GB, United Kingdom, Registration No. 1982084, Registered in England and Wales.