We are able to test both servers shibboleth idp and shibboleth sp in two different servers seperately with testshib. So let me know whether we can avoid testshib and we can use our shibboleth idp and sp for SSO authentication. Please update me.<br>
<br>Thanks<br>Geo<br>
<br><br><div class="gmail_quote">On Wed, Mar 21, 2012 at 12:44 PM, Geo P.C. <span dir="ltr"><<a href="mailto:pcgeopc@gmail.com">pcgeopc@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>We configured Shibboleth IdP as per the instruction in <a title="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall</a> and
tested with testshib. While testing Identity Provider through <a title="https://sp.testshib.org/" href="https://sp.testshib.org/" target="_blank">https://sp.testshib.org/</a> we given the
entityID as <a title="https://shibboleth.citrus.local/idp/shibboleth" href="https://shibboleth.citrus.local/idp/shibboleth" target="_blank">https://shibboleth.citrus.local/idp/shibboleth</a> but
we are getting an error message in browser as follows:</div>
<h3><font face="Times New Roman">-------------</font></h3>
<h3><font face="Times New Roman">ERROR</font></h3>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">An error occurred while
processing your request. Please contact your helpdesk or user ID office for
assistance.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">This service requires
cookies. Please ensure that they are enabled and try your going back to your
desired resource and trying to login again.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">Use of your browser's
back button may cause specific errors that can be resolved by going back to your
desired resource and trying to login again.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">If you think you were
sent here in error, please contact technical support</font></font></p>
<div><font face="Times New Roman"><b><font style="FONT-SIZE:13.6pt">Error Message: Error decoding authentication request
message</font></b> </font></div>
<div><b><font face="Times New Roman">-----------------</font></b></div>
<div><b><font face="Times New Roman">In idp-process.log it
shows:</font></b></div>
<div><b></b> </div>
<div>12:33:18.417 - INFO [Shibboleth-Access:74] -
20120321T070318Z|192.168.1.75|shibboleth.citrus.local:443|/profile/SAML2/Redirect/SSO|</div>
<div>12:33:19.459 - ERROR
[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:618] - No
user identified by login handler.</div>
<div>12:33:19.467 - ERROR
[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] -
Authentication failed with the error:</div>
<div>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No
user identified by login handler.</div>
<div> at
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.validateSuccessfulAuthentication(AuthenticationEngine.java:619)
[shibboleth-identityprovider-2.3.6.jar:na]</div>
<div>................</div>
<div> </div>
<div> </div>
<div>12:33:19.475 - INFO [Shibboleth-Access:74] -
20120321T070319Z|192.168.1.75|shibboleth.citrus.local:443|/profile/SAML2/Redirect/SSO|</div>
<div>12:33:19.481 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:373] -
Error decoding authentication request message</div>
<div>org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or
SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message</div>
<div> </div>
<div>---------------------</div>
<div> </div>
<div>Can anyone please help us on it.<br><br></div>
<div> </div>
<div>Thanks<br><br></div><font color="#888888">
<div>Geo<br></div>
</font></blockquote></div><br>