Ex: SAML message intended destination endpoint did not match the recipient endpoint

[Brent Putman]

On 10/4/24 11:53 PM, Paul B. Henson via users wrote:
> Here's another one:
>
> 2024-10-04 14:00:18,533 - 20.46.149.159/node019xst8p60ja0nl7bfm6ng9kkb569308 - ERROR [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:202] - Message Handler:  SAML message intended destination endpoint 'https://idp.cpp.edu/idp/profile/SAML2/Redirect/SSO' did not match the recipient endpoint'https://streaming.cpp.edu/idp/profile/SAML2/Redirect/SSO'
>
>
> I don't understand why it's saying the recipient endpoint is the SP host instead of the idp host?


I can't say in a detailed way, since I don't know anything about the 
environment, virtual host config, etc.  But the IdP is definitely 
seeing that the request is being processed at 
"https://streaming.cpp.edu/idp/profile/SAML2/Redirect/SSO".  And that 
is not the Destination URI to which the SP was intending to send the 
protocol message.

--Brent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241005/452c99dc/attachment.htm>