<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>I'm having trouble figuring out how exactly does the IdP know to which end point to send the assertion. For example, the IdP receives an AuthnRequest and it must issue the assertion. But how does the IdP chooses to which end point of the SP to send that assertion? Some configuration excerpts would be great.</div><div><br></div><div>Here's the AuthnRequest the IdP receives:</div><div><?xml version="1.0" encoding="UTF-8"?></div><div><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="http://machine:8080/appName/ConsumeSAML20Response" ID="_45b9055d-3813-4b10-9ca6-abc38d269e99" IssueInstant="2012-01-19T16:22:44" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><br> <saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://machine</saml:Issuer><br> <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/><br> <samlp:RequestedAuthnContext Comparison="exact"/><br> <saml:AuthnContextClassRef xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef><br></samlp:AuthnRequest></div><div>and here's the log:</div><div><br></div><div>WARN [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:287] - No metadata for relying party http://machine, treating party as anonymous<br>WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:199] - SAML 2 SSO profile is not configured for relying party http://machine<br>DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:323] - LoginContext key cookie was not present in request<br>DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display</div><div><br></div><div>The relying-party.xml file contains this:</div><div> <rp:AnonymousRelyingParty provider="https://machine/idp/shibboleth" defaultSigningCredentialRef="IdPCredential"/><br> <rp:DefaultRelyingParty provider="https://machine/idp/shibboleth" defaultSigningCredentialRef="IdPCredential" <br> defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol"></div><div><br></div><div>I have made the message contain the Issuer for the authentication request be http://machine/idp/shibboleth but it returns the same.</div><div><br></div><div>Any help with this would be greatly
appreciated.<br></div><div><br></div><div>Thanks,</div><div>Alex<br></div></div></body></html>