Error Message: No peer endpoint available to which to send SAML response

[Nate Klingenstein]

Peychow,

The error message is just a generic one that says the IdP was unable to
determine an appropriate URL to send an assertion to.  The most common
cause of that is the AssertionConsumerService URL in the AuthnRequest not
matching any endpoints in the metadata for the SP, and that's what's
happening here.

You'll want to set a unique entityID for your SP among other basic
configuration before you do anything, but the error message is basically
self-explanatory

03:00:22.725 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying
party 'https://sp.example.org/shibboleth' requested the response to be
returned to endpoint with ACS URL '
http://220.128.220.152/Shibboleth.sso/SAML2/POST'  and binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with
that URL and using a supported binding,  can be found in the relying
party's metadata

Two likely root causes would be someone else uploading metadata to TestShib
with the same default entityID but totally different endpoints, or
triggering login using http when the metadata only contains https endpoints.

I would set a unique entityID, upload new metadata to TestShib or
SAMLtest.id, and make sure you're initiating login with the right scheme.

Take care,
Nate.



On Wed, Oct 31, 2018 at 2:09 AM, peychow <peychow at gmail.com> wrote:

> Hi all ：
>
>
>
> I installed Shibboleth SP on my windows pc. I try to make a connect with
> the testshib. However, I get this error after I login.
>
> Error Message: No peer endpoint available to which to send SAML response
>
> I have checked the troubleshooting page (https://wiki.shibboleth.net/
> confluence/display/SHIB2/IdPTroubleshootingCommonErrors ), but I'm not
> not really sure what else to look for to resolve the error?
>
>
>
> ===========================================
>
> Attachment is shibboleth2.xml , metadata for my Shibboleth SP, and
> idp-process.log from the TestShib IdP
>
>
>
>
>
> Best Regards,
> peychow
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181031/03920f54/attachment.html>