RequesterID error on Azure/Shib IdP integration

[Dave Perry]

Ah right.
I changed the bean code's relyingPartyId to the sts.windows.net address (including the end /) and now it's working - thanks.

I will push the provider to tidy up their SAML engine though.

Cheers
Dave

_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
d.perry1 at yorksj.ac.uk<mailto:d.perry1 at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk>

[cid:ed811abc-de74-44ad-a896-d38386a3a089]

________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: 04 March 2024 15:56
To: Shib Users <users at shibboleth.net>
Cc: Dave Perry <d.perry1 at yorksj.ac.uk>
Subject: Re: RequesterID error on Azure/Shib IdP integration

Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.


> Thanks for the signpost. I have added the following to relying-party.xml:

You're probably trying to attach it as a setting about the SP, but that's not it, it's about the proxied IdP. That's the relying party in this scenario.

-- Scott








-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240304/fc890aed/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-dghsnsdp.png
Type: image/png
Size: 12155 bytes
Desc: Outlook-dghsnsdp.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240304/fc890aed/attachment.png>