Trouble configuring SP3 for multiple idps

[Will Knight]

Hi, I'm upgrading my company's Shibboleth SP V2 to V3.  I keep getting this
error when I test: *Shibboleth handler invoked at unconfigured location*.
My site is configured with IIS and the web.config specifies anything
https://sso-dev.company.com/Shibboleth.sso/* will hit our in-house handler.
(I'm not sure if the error is complaining about the native SP's handler or
our own).
I tried setting native.logger's mode to DEBUG but I can't even find a
native.log file on the server.  Any guidance would be greatly appreciated.
I've pasted the shibboleth2.xml file below.

/NOTE: While this file is setup to handle just one idp, I plan on using this
SP for multiple idps.  I'm just trying to get it working with the 1 for
now./

<SPConfig xmlns="urn:mace:shibboleth:3.0:native:sp:config"
    xmlns:conf="urn:mace:shibboleth:3.0:native:sp:config"
    clockSkew="180">

    <OutOfProcess
tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" />

    <!--
    The InProcess section contains settings affecting web server modules.
    Required for IIS, but can be removed when using other web servers.
    -->
    <InProcess>
        <ISAPI normalizeRequest="true" safeHeaderNames="true">
            <Site id="16" name="sso-dev.company.com"/>
        </ISAPI>
    </InProcess>

    <RequestMapper type="Native" target="
https://sso-dev.company.com/Shibboleth.sso/">
        <RequestMap>
            <Host name="sso-dev.company.com">
                <Path name="secure" authType="shibboleth"
requireSession="true"/>
            </Host>
        </RequestMap>
    </RequestMapper>

    <ApplicationDefaults entityID="https://sso-dev.company.com/shibboleth"
        REMOTE_USER="eppn subject-id pairwise-id persistent-id"

cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="true" handlerSSL="true" cookieProps="https"
  handlerURL="/Shibboleth.sso" >

            <SSO
target="https://sso-dev.company.com/Shibboleth.sso/"
discoveryProtocol="SAMLDS" discoveryURL="
https://sso-dev.company.com/Shibboleth.sso/">
              SAML2
            </SSO>

            <!-- SAML and local-only logout. -->
            <Logout>SAML2 Local</Logout>

            <!-- Administrative logout. -->
            <LogoutInitiator type="Admin" Location="/Logout/Admin"
acl="127.0.0.1 ::1" />

            <!-- Extension service that generates "approximate" metadata
based on SP configuration. -->
            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>

            <!-- Status reporting service. -->
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>

            <!-- Session diagnostic service. -->
            <Handler type="Session" Location="/Session"
showAttributeValues="true"/>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        </Sessions>

        <Errors supportContact="implementation at company.com"
            redirectErrors="https://sso-dev.company.com/ssoerror.html"/>
<RelyingParty name="https://idp.jumpcloud.com/StudentJumpCloud"
keyName="Will Knight"/>

<MetadataProvider type="Chaining">
<MetadataProvider type="XML"
path="C:\opt\shibboleth-sp\Metadata\test_student.xml"></MetadataProvider>
</MetadataProvider>

<!-- Map to extract attributes from SAML assertions. -->
        <AttributeExtractor type="XML" validate="true"
reloadChanges="false" path="attribute-map.xml"/>

        <!-- Default filtering policy for recognized attributes, lets other
data pass. -->
        <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>

        <!-- Simple file-based resolvers for separate signing/encryption
keys. -->
        <CredentialResolver type="File" use="signing"
            key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
        <CredentialResolver type="File" use="encryption"
            key="sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem"/>
<CredentialResolver type="File" use="signing"
            certificate="jumpcloud_student.pem"/>

    </ApplicationDefaults>

    <!-- Policies that determine how to process and authenticate runtime
messages. -->
    <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>

    <!-- Low-level configuration about protocols and bindings available for
use. -->
    <ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>

</SPConfig>


-- 
Will Knight
Web Developer
Quaver Music LLC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181031/76116f94/attachment.html>