Issue with Shibboleth SP - Endpoint Mismatch Error

Peter Schober peter.schober at univie.ac.at
Tue Oct 15 17:44:46 UTC 2024


Luan Trindade via users <users at shibboleth.net> [2024-10-15 16:27 CEST]:
> "Message Handler: SAML message intended destination endpoint '
> https://FQDN.DOMAIN.br/idp/profile/SAML2/POST/SSO' did not match the
> recipient endpoint 'http://FQDN.DOMAIN.br/idp/profile/SAML2/POST/SSO'"

"https://... did not match http://"

Since you're setting...

>     RequestHeader set X-Forwarded-Proto "https"
>     RequestHeader set X-Forwarded-Port "443"

I suppose that Jetty simply ignores these and simply determines the
protocol by being access over plain http?

>     ProxyPass /idp http://localhost:8080/idp
>     ProxyPassReverse /idp http://localhost:8080/idp

Best,
-peter


More information about the users mailing list