Shibboleth SP 3 IIS and handlerURL

[John Schrader]

I am attempting to configure an alternate handlerURL for a Windows
application.

Default SP 3.0.4.0 is installed on a clean server 2012R2 w/IIS.
(fwiw is am seeing the same on 2016 and 2019)


With Sessions:

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="true"
cookieProps="https">

http://localhost/Shibboleth.sso/Session
returns:

A valid session was not found.

When I add   handlerURL="/sp/Shibboleth.sso" as in:

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="true" cookieProps="https"
                  handlerURL="/sp/Shibboleth.sso">

I am expecting:
http://localhost/sp/Shibboleth.sso/Session

to return:

A valid session was not found.

But instead IIS is returning a 404.
It seems that the Handler is NOT running as expected.

Does anyone have any thoughts/experience using the handlerURL option with
IIS
or can help me discover what I have misconfigured?

Thanks!
-John S

-- 
John Schrader
Identity and Access Management
Office of Information Technologies
University of Notre Dame

EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER
—ALBERT EINSTEIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190321/4e6279f0/attachment.html>