change of response URL

Rohit Shinde rohit at venturit.com
Sun Nov 18 00:29:26 EST 2018


When I changed homeURL to https://mydomain/saml/consume <https://mydomain/saml/consume> its redirecting to new home page instead of https://mydomain <https://mydomain/> but I was expecting SAMLResponse from idp on new homeURL. 

> On 18-Nov-2018, at 10:34 AM, Nate Klingenstein <ndk at signet.id> wrote:
> 
> Rohit,
> 
>> This change of response came in my mind because currently I am getting response in mydomain/Shibboleth.sso/SAML2/POST but the problem is I am getting 302 error for https://mydomain/Shibboleth.sso/SAML2/POST  where SAMLResponse is and after that its getting redirected to https://mydomain
>> How to get rid of 302 error?  
> 
> The 302 probably isn't an error.  That's the way the software redirects you to the protected resource after it's finished consuming an assertion and creating a session using it.  It's redirecting you to the base URL because it doesn't have a functional place to send you(e.g. no relay state in the SAML Response).  You can set a different default(homeURL on the Sessions element) if for some reason your deployment environment can't set a proper destination URL.
> 
> I'd turn up the SP's logging to DEBUG and look at /var/log/shibboleth/shibd.log, where you should see a session being created.
> 
> Thanks,
> Nate.
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181118/57621b7f/attachment.html>


More information about the users mailing list