change of response URL

[Nate Klingenstein]

Rohit,

> This change of response came in my mind because currently I am getting response in mydomain/Shibboleth.sso/SAML2/POST but the problem is I am getting 302 error for https://mydomain/Shibboleth.sso/SAML2/POST  where SAMLResponse is and after that its getting redirected to https://mydomain
> How to get rid of 302 error?  

The 302 probably isn't an error.  That's the way the software redirects you to the protected resource after it's finished consuming an assertion and creating a session using it.  It's redirecting you to the base URL because it doesn't have a functional place to send you(e.g. no relay state in the SAML Response).  You can set a different default(homeURL on the Sessions element) if for some reason your deployment environment can't set a proper destination URL.

I'd turn up the SP's logging to DEBUG and look at /var/log/shibboleth/shibd.log, where you should see a session being created.

Thanks,
Nate.