https://usertest.sciquest.com and specifying acsIndex

[Peter Schober]

* Bickel, David <jdbickel at iu.edu> [2019-08-26 21:39]:
> When SP Initiated login is attempted our IDP choses the first
> endpoint and fails.

I get HTTP 403 when I try https://usertest.sciquest.com myself, so
what does the SAML authenication request say when you attempt
SP-initiated SSO?

Since it's their SP that generates the request already fully knowing
the IDP it is for there's no reason it should (1) rely on ACS index in
the first place instead of specifying the ACS URL itself by value and
(2) contain the wrong index for your IDP.

(Of course the fact that they require a unique ACS URL and index for
every IDP is plain silly, but that's vendor SAML implementations for
you, I guess.)

-peter