<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Mauro,<div><br></div><div><div><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; font-family: Helvetica; color: rgb(0, 0, 0); "><div lang="IT" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">I read your link carefully, which suggested to copy and edit web.xml from src/main/webapp/WEB-INF/web.xml into /opt/shibboleth-idp/conf/web.xml (which in my case is C:\Program Files (x86)\Internet2\Shib2IdP\conf, right?), however I keep getting the same error message:</span></div></div></div></span></blockquote><div><br></div><div>This won't work. web.xml is a file that is built into the .war file itself, which is created when Shibboleth is installed. It will not be read from /opt/shibboleth-idp/conf/ (or <span class="Apple-style-span" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; ">C:\Program Files (x86)\Internet2\Shib2IdP\conf</span>), as you guessed.</div><div><br></div><div>You'll need to modify the copy in the distribution that you downloaded (e.g. /opt/shibboleth-identityprovider-2.3.8/src/main/webapp/WEB-INF/web.xml, translated into Windows) and then rebuild and redeploy the .war file by running the installation script(install.bat) again.</div><div><br></div><div>Be careful to choose the option to not overwrite your configuration files. You might want to back up the /opt/shibboleth-idp/ directory just to be safe.</div><div><br></div>Then, restart your servlet container.</div><div><br><blockquote type="cite"><span class="Apple-style-span" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; ">Also: should I un-comment <ph:LoginHandler xsi:type="ph:RemoteUser"> section in handler.xml? I didn’t do it because I’m expected to protect my path via web.xml.</span></blockquote><div><br></div><div>I believe you don't need to. Those LoginHandlers are used by the web browser protocol flows.</div><br><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div lang="IT" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="color: rgb(0, 0, 0); margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Finally: as suggested on<span class="Apple-converted-space"> </span></span><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableECP" style="color: blue; text-decoration: underline; "><span lang="EN-US">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableECP</span></a><span class="Apple-converted-space"> </span><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">I added the following excerpt to the web.xml (keeping all the rest of the file), however I’m wondering if <url-pattern> should contain "/profile/SMAL2/SOA/ECP" despite my relying party looks for "/profile/SMAL2/SOA/ECP".</span><span lang="EN-US"><o:p></o:p></span></div></div></div></span></blockquote><br></div><div>I can't quite figure out what you're asking here, I'm afraid.</div></div><div><br></div><div>Take care,</div><div>Nate.</div></body></html>