That's good to know and will pass it back to Oracle to resolve.<br><br>I have fixed it by modify the POST HTML template to include it as part of the form.<br><br>Thanks for confirming my suspicions.<br><br>NIrving<br><br>
<div class="gmail_quote">On Wed, Oct 5, 2011 at 3:43 PM, Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Shibboleth is not generating that URL, the IdP is. And in the POST<br>
binding the target is a form parameter. So your IdP isn't an SAML 1.1<br>
IdP (meaning it does not following the SAML specification).<br>
<div><div></div><div class="h5"><br>
On Wed, Oct 5, 2011 at 00:19, Nicholas Irving <<a href="mailto:nirving@darkedges.com">nirving@darkedges.com</a>> wrote:<br>
><br>
> Afternoon,<br>
> Have an interesting problem. Have Oracle Identity Federation 11g as my IDP with Shibboleth 2.4.3 SP to use SAML 1.1. I have managed to find all the necessary metadata changes required to do the integration and it works, if and only if I manually insert a TARGET value to the POST data via Firefox and Tamper Data.<br>
><br>
> After being redirected from the SP to the IDP and I successfully authenticate, the IDP generates the SAML Assertion and posts to<br>
> <a href="https://id.xxxxx.com:8443/Shibboleth.sso/SAML/POST?TARGET=%2Fsecure%2F" target="_blank">https://id.xxxxx.com:8443/Shibboleth.sso/SAML/POST?TARGET=%2Fsecure%2F</a><br>
><br>
> As you can see the request contains the TARGET parameter, but as part of the URL and not the POST. So the question is, is this Shibboleth being true to the SAML 1.1 spec and requiring TARGET to be POST'd or has it missed a trick and this is a valid request?<br>
><br>
> I know I can use SAML 2, but I have a requirement to test against a SAML 1.1 SP and so I took this opportunity to learn how to deploy and configure Shibboleth.<br>
><br>
> Regards<br>
> --<br>
> Nicholas Irving<br>
> Simple, Accurate, Secure.<br>
> <a href="tel:04%200007%200562" value="+61400070562">04 0007 0562</a><br>
> <a href="http://www.darkedges.com/" target="_blank">http://www.darkedges.com/</a><br>
><br>
><br>
</div></div>> --<br>
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
<br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
<font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></blockquote></div><br><br clear="all"><br>-- <br><table border="0">
<tbody><tr><td style="font-family:verdana,sans-serif"><font size="2">Nicholas Irving<br>Simple, Accurate, Secure. <br>04 0007 0562<br><a href="http://www.darkedges.com/?gmail" target="_blank">http://www.darkedges.com/</a></font></td>
<td valign="top"><br></td><td><img src="http://www.darkedges.com/images/logo.jpg"></td></tr>
</tbody></table><br>