Error 403 for IdP (Jetty 9.3)

[HCUK eLearning]

We run Jetty 9.3 for our live and test IdPs. I've changed the URL for our
test one (moving to a different subdomain, forced by our reverse proxy
managers), and given Jetty the new HTTPS certificate - it seems to load
fine.

But when I trigger a login attempt from the SP (Canvas in this case), I get
a 403/Forbidden error:
Forbidden
You don't have permission to access /idp/profile/SAML2/Redirect/SSO on this
server.

I've tried looking at jetty.log and access.log under the idp_base/logs
folder, to no avail.

Any suggestions on where else to check would be appreciated.


Thanks,
Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180606/1f06bfa1/attachment.html>