<div>I looked closer into my problem with SP not accepting an authn assertion through the proxy. I decrypted the "good" assertion and the "bad" assertion and I see no differences of substance in their content. Each has an AttributeStatement and an AuthnStatement, and only a session ID differs between the two AuthnStatements.</div>
<div> </div><div>I also learned a tad bit more about the environment. This is an F5 proxy. No DNS is setup yet. But this shouldn't matter as long as there is a host entry on the test machine and if the default configuration uses front channel binding. Does the SP contact the IdP directly?<br>
</div><div>-Istvan<br></div><div class="gmail_quote">On Fri, Aug 24, 2012 at 11:05 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote">
<div class="im">On Aug 24, 2012, at 12:04 AM, "Istvan Gonzales" <<a href="mailto:istvangonzales@gmail.com">istvangonzales@gmail.com</a>> wrote:<br>
<br>
><br>
> Is there some obvious misconfiguration that can be responsible for their issue, specifically that users can log in properly if accessing the website directly, but they get the below error when logging into a protected area when using a host entry to the proxy? Non-protected areas of the website work fine.<br>
><br>
> "ISAPI extension can only be invoked to process Shibboleth protocol requests.Make sure the mapped file extension doesn't match actual content."<br>
<br>
</div>The requests for the handler are being processed such that The effective URL seen by the SP doesn't match the handlerURL setting.<br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>