endpoint security handler error

[IAM David Bantz]

An SP request to my IdP is triggering this error upon processing the
incoming request:

15:16:40:803  ERROR [10.25.250.168]
org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:174
>  Message Handler:  SAML message intended destination endpoint URI
required by binding was empty

Here’s that request captured in SamlTracer

<samlp:AuthnRequest ID=“•••"

                    Version="2.0"

                    IssueInstant="2024-04-23T23:28:33Z"

                    ProtocolBinding=
"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

                    AssertionConsumerServiceURL="https://
.../SAML2IdentityProviderSignin.aspx"

                    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"

                    >

<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
https://sw-ualand-pa1.apps.ad.alaska.edu/landfolio</saml:Issuer>

<samlp:NameIDPolicy Format=
"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"

                    AllowCreate="true"

                    />

</samlp:AuthnRequest>


and the ACS in that app’s metadata is


        <md:AssertionConsumerService

Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST”

Location="https://.../SAML2IdentityProviderSignin.aspx" index=“1"

/>


Checked the ACS URLs do match exactly.


What is wrong with that request+metadata combination ?


David St Pierre Bantz

U Alaska IAM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240423/d1849383/attachment.htm>