You're right,<div><br></div><div>I just figured out the problem. I was declaring to the community an absolute AssertionConsumerService location that starts with my entityID's domain name (<span class="Apple-style-span" style="border-collapse: collapse; color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; "><a href="https://mycompany.net/">https://mycompany.net/</a></span>SAML2/POST).</div>
<meta http-equiv="content-type" content="text/html; charset=utf-8"><meta http-equiv="content-type" content="text/html; charset=utf-8"><div>The community declaration web form does not seem to accept relative urls so I had to change it to <a href="https://something.local/SAML2/POST">https://something.local/SAML2/POST</a> and it seems to work now :)<br>
<div><br></div><div>Thank you very much for your help !</div><div><br></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><font class="Apple-style-span" color="#638c9c" face="Verdana, 'Lucida Grande', Lucida, Helvetica, Arial, sans-serif"><span class="Apple-style-span" style="line-height: 19px;"><br>
</span></font><br><div class="gmail_quote">On Wed, Oct 12, 2011 at 3:53 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
* Rayene Ben Rayana <<a href="mailto:rayene.benrayana@gmail.com">rayene.benrayana@gmail.com</a>> [2011-10-12 15:47]:<br>
<div class="im">> In the web browser, when I do not use the url declared as entityID<br>
<br>
</div>You never "use" an entityID. You set it in the software and<br>
communicate metadata that contains this. It's a name, nothing else.<br>
You can easily seet his when you change your entityID to a URN, since<br>
these do not "resolve" to anything (without special systems).<br>
<div class="im"><br>
> I am<br>
> able to :<br>
> - access the DS page<br>
> - select an IdP<br>
> - access the IdP page and fill credentials.<br>
> But, when I submit, I get the following error :<br>
><br>
</div>> *Error Message: Invalid IdP URL (HTTP 404)*<br>
<br>
What does "access the DS page" mean, specifically? You'll need to<br>
access a SAML service provider, which in turn may redirect you to a<br>
DS, which (with SAML2) will redirect you back to the SP, which in turn<br>
will issue a SAML authentication request to the IdP, which then might<br>
ask you to authenticate and will then send you off the SP with a SAML<br>
protocol message.<br>
So without an SP there's no authentication request and there's nothing<br>
for the IdP to do after authentication.<br>
<br>
But none of this should have anything to do with the content of the<br>
string of the entityIDs used.<br>
<font color="#888888">-peter<br>
</font><div><div></div><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div></div>