Thank you Sangeet. Do we need to specify SP entityID anywhere in IDP metadata? I used the same configuration as you mentioned but didn't work.<br><br>--Pavan<br><br><div class="gmail_quote">On Wed, Sep 7, 2011 at 4:57 AM, Sangeet Mehta (UST, IND) <span dir="ltr"><<a href="mailto:Sangeet.Mehta@ust-global.com">Sangeet.Mehta@ust-global.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div link="blue" vlink="purple" lang="EN-US"><div><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);">Pavan,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);">In my case for the shibboleth2.xml<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);">SP is specified in <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><ApplicationDefaults entityID="</span><b><span style="font-size: 11pt; color: red;"><a href="https://my.domain.com/shibboleth" target="_blank">https://my.domain.com/shibboleth</a></span></b><span style="font-size: 11pt; color: rgb(31, 73, 125);">" attributePrefix="AJP_"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);">IDP is specified in<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"> <SSO entityID="</span><b><span style="font-size: 11pt; color: red;"><a href="https://my.domain.com:8443/idp/shibboleth" target="_blank">https://my.domain.com:8443/idp/shibboleth</a></span></b><span style="font-size: 11pt; color: rgb(31, 73, 125);">"> SAML2 SAML1 </SSO><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);">Thanks<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size: 11pt; color: rgb(31, 73, 125);">sangeet<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125);"><u></u> <u></u></span></p>
<div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; padding: 3pt 0in 0in;"><p class="MsoNormal"><b><span style="font-size: 10pt;">From:</span></b><span style="font-size: 10pt;"> <a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> [mailto:<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>] <b>On Behalf Of </b>Pavan K<br>
<b>Sent:</b> Wednesday, September 07, 2011 6:13 AM<br><b>To:</b> Shib Users<br><b>Subject:</b> Re: Unable to establish security of incoming assertion.<u></u><u></u></span></p></div><div><div></div><div class="h5"><p class="MsoNormal">
<u></u> <u></u></p><p class="MsoNormal">Thank you Nate.<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">IDP's metadata has successfully loaded into SP. I found the related messages in "shibd.log". And "entity ID in IDP's metadata is "https://<machineA>:8443/idp/shibboleth". Is there any specific restrcition on "entityId" of "<ApplicationDefaults>" in "shibboleth2.xml" file in SP? <u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Thanks,<u></u><u></u></p></div><div><p class="MsoNormal" style="margin-bottom: 12pt;">Pavan<u></u><u></u></p><div><p class="MsoNormal">On Tue, Sep 6, 2011 at 5:36 PM, Nate Klingenstein <<a href="mailto:ndk@internet2.edu" target="_blank">ndk@internet2.edu</a>> wrote:<u></u><u></u></p>
<div><p class="MsoNormal">Pavan,<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">You need to ensure that your SP is loading your IdP's metadata, and that the EntityDescriptor entityID in your IdP's metadata is <a>https://</a><machineA>:8443/idp/shibboleth. You may find a problem related to failure to load the metadata during startup of your SP.<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Hope this helps,<u></u><u></u></p></div><div><p class="MsoNormal">Nate.<u></u><u></u></p></div><div><div><p class="MsoNormal"><u></u> <u></u></p>
<div><div><p class="MsoNormal">On Sep 7, 2011, at 0:27 , Pavan K wrote:<u></u><u></u></p></div><p class="MsoNormal"><br><br><u></u><u></u></p><div><p class="MsoNormal"><span style="font-size: 13.5pt; color: black;">Do we need to load the SP metadata on IDP? Is there any configuration i am missing?<u></u><u></u></span></p>
</div><p class="MsoNormal"><u></u> <u></u></p></div><p class="MsoNormal"><u></u> <u></u></p></div></div></div><p class="MsoNormal"><br>--<br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><u></u><u></u></p>
</div><p class="MsoNormal"><u></u> <u></u></p></div></div></div></div></div><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br>