authn

[Cantor, Scott]

On 11/29/17, 1:36 PM, "users on behalf of Cheltenham, Chris" <users-bounces at shibboleth.net on behalf of ccheltenham-ext at philasd.org> wrote:

> The authn is redirected or posted back to put IDP but Shib doesn’t like the Auth-N request.

Because you told Google's SP to use the wrong login service endpoint/URL.
 
> SHib complains of  - “did not contain the providerId query parameter”

That means you're using an unsolicited response endpoint and not a binding-specific endpoint for SAML requests coming from an SP. Shibboleth uses binding-specific URLs, not one location that handles every case. 

-- Scott