<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Shib gurus:</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">We are going in circles testing our idp:</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">loaded the following idp data (metadata) to testshib and I always get&nbsp;</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div
 class="error">opensaml::saml2md::MetadataException at (https://sp.testshib.org/Shibboleth.sso/TestShib)</div>

<div>Unable to locate metadata for identity provider (https://my.publicdomainip.com/idp/shibboleth)</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">&nbsp;using self-signed certs, and just tomcat for testing..</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">Amy pointers to troubleshoot are highly appreciated. Thanks and good day.<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
 times new roman,new york,times,serif; background-color: transparent; font-style: normal;">PS: if it matters, idp std install was made with "localhost" and later replaced by my.publicdomainip.com<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">=============Begin uploaded data========</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">&lt;?xml version="1.0" encoding="UTF-8"?&gt;&lt;EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://my.publicdomainip.com/idp/shibboleth" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
 xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"&gt;&lt;IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"&gt;&lt;Extensions&gt;&lt;shibmd:Scope
 regexp="false"/&gt;&lt;/Extensions&gt;&lt;KeyDescriptor&gt;&lt;ds:KeyInfo&gt;&lt;ds:X509Data&gt;&lt;ds:X509Certificate&gt;MIIDDzCCAfegAwIBAgIUVLm52qjJYNuDIE4NUQw/qUh2/dQwDQYJKoZIhvcNAQEF<br>BQAwFDESMBAGA1UEAxMJbG9jYWxob3N0MB4XDTEyMTAwNDE3MTA1MloXDTMyMTAw<br>NDE3MTA1MlowFDESMBAGA1UEAxMJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF<br>AAOCAQ8AMIIBCgKCAQEAgbMWau8xD7wm3WmY8tlVT5ASeb1AlAr/X62OBaedd9jJ<br>p4ThzNBL+jAXwoxUgppOLV7XSQmNI7FA5Xm1KW84SQfdGJuvxYBdk/iKtzFbZmww<br>5ldnmYpkOPeC/4IFpehvkn6BQZWvd2+Vk2RCq2KWzRph0lviU4XMuiME9xbDHav5<br>cTNYol9pWw6gnvbp10ub0etNRnVOj6MW1oa8Bc50jWLkcoVjXZWLa6yKxhOVa4FZ<br>thR86bNz+zNjGsLj1u2A53kPaQLL8Zk+c1f/3XotCelDFLx5i1/BaHCvX5Xw1z8y<br>9yt2BsWYL/McmTLtKniX53jxCZ+2Vkk7o7NPd42f0QIDAQABo1kwVzA2BgNVHREE<br>LzAtgglsb2NhbGhvc3SGIGh0dHBzOi8vbG9jYWxob3N0L2lkcC9zaGliYm9sZXRo<br>MB0GA1UdDgQWBBRlQg+b+etC6n20QE7kHBYH61V/fDANBgkqhkiG9w0BAQUFAAOC<br>AQEADln/5a7HTtneN2xBJDkPd5Dy8lVu+AAAXQ/BEGQ9MHuPGpVWhkqJ3ADaQmBy<br>eaETtCo7c3tnmANF/hUKVTe7IwQ0
8cOck+DCBJkg75d8kGWDH/Oex1BZct2fyHZ4<br>fzAspdFCTBctYlpd7Y924qVqbRnvs9MSJZeiI4//aoksV/JottBpZtSKDpDvgDuP<br>wDu6HO3836rEsulVvM8s+MKyrxOwCiAZOeMKK20galVo+O47IzhmmW3qoWr4v2lt<br>dxNDpUXamymB84SywjP+puQxhCw/WwgKOhiBhOf4sC52k574WuzVSoOE1lCqeWCq<br>7m0g1OugkEnrHYXzU/EKOOgryw==&lt;/ds:X509Certificate&gt;&lt;/ds:X509Data&gt;&lt;/ds:KeyInfo&gt;&lt;/KeyDescriptor&gt;&lt;ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://my.publicdomainip.com/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/&gt;&lt;ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://my.publicdomainip.com/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/&gt;&lt;NameIDFormat&gt;urn:mace:shibboleth:1.0:nameIdentifier&lt;/NameIDFormat&gt;&lt;NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:transient&lt;/NameIDFormat&gt;&lt;SingleSignOnService
 Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://my.publicdomainip.com/idp/profile/Shibboleth/SSO"/&gt;&lt;SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://my.publicdomainip.com/idp/profile/SAML2/POST/SSO"/&gt;&lt;SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://my.publicdomainip.com/idp/profile/SAML2/POST-SimpleSign/SSO"/&gt;&lt;SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://my.publicdomainip.com/idp/profile/SAML2/Redirect/SSO"/&gt;&lt;/IDPSSODescriptor&gt;&lt;AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"&gt;&lt;Extensions&gt;&lt;shibmd:Scope
 regexp="false"/&gt;&lt;/Extensions&gt;&lt;KeyDescriptor&gt;&lt;ds:KeyInfo&gt;&lt;ds:X509Data&gt;&lt;ds:X509Certificate&gt;MIIDDzCCAfegAwIBAgIUVLm52qjJYNuDIE4NUQw/qUh2/dQwDQYJKoZIhvcNAQEF<br>BQAwFDESMBAGA1UEAxMJbG9jYWxob3N0MB4XDTEyMTAwNDE3MTA1MloXDTMyMTAw<br>NDE3MTA1MlowFDESMBAGA1UEAxMJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF<br>AAOCAQ8AMIIBCgKCAQEAgbMWau8xD7wm3WmY8tlVT5ASeb1AlAr/X62OBaedd9jJ<br>p4ThzNBL+jAXwoxUgppOLV7XSQmNI7FA5Xm1KW84SQfdGJuvxYBdk/iKtzFbZmww<br>5ldnmYpkOPeC/4IFpehvkn6BQZWvd2+Vk2RCq2KWzRph0lviU4XMuiME9xbDHav5<br>cTNYol9pWw6gnvbp10ub0etNRnVOj6MW1oa8Bc50jWLkcoVjXZWLa6yKxhOVa4FZ<br>thR86bNz+zNjGsLj1u2A53kPaQLL8Zk+c1f/3XotCelDFLx5i1/BaHCvX5Xw1z8y<br>9yt2BsWYL/McmTLtKniX53jxCZ+2Vkk7o7NPd42f0QIDAQABo1kwVzA2BgNVHREE<br>LzAtgglsb2NhbGhvc3SGIGh0dHBzOi8vbG9jYWxob3N0L2lkcC9zaGliYm9sZXRo<br>MB0GA1UdDgQWBBRlQg+b+etC6n20QE7kHBYH61V/fDANBgkqhkiG9w0BAQUFAAOC<br>AQEADln/5a7HTtneN2xBJDkPd5Dy8lVu+AAAXQ/BEGQ9MHuPGpVWhkqJ3ADaQmBy<br>eaETtCo7c3tnmANF/hUKVTe7IwQ0
8cOck+DCBJkg75d8kGWDH/Oex1BZct2fyHZ4<br>fzAspdFCTBctYlpd7Y924qVqbRnvs9MSJZeiI4//aoksV/JottBpZtSKDpDvgDuP<br>wDu6HO3836rEsulVvM8s+MKyrxOwCiAZOeMKK20galVo+O47IzhmmW3qoWr4v2lt<br>dxNDpUXamymB84SywjP+puQxhCw/WwgKOhiBhOf4sC52k574WuzVSoOE1lCqeWCq<br>7m0g1OugkEnrHYXzU/EKOOgryw==&lt;/ds:X509Certificate&gt;&lt;/ds:X509Data&gt;&lt;/ds:KeyInfo&gt;&lt;/KeyDescriptor&gt;&lt;AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://my.publicdomainip.com/idp/profile/SAML1/SOAP/AttributeQuery"/&gt;&lt;AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://my.publicdomainip.com/idp/profile/SAML2/SOAP/AttributeQuery"/&gt;&lt;NameIDFormat&gt;urn:mace:shibboleth:1.0:nameIdentifier&lt;/NameIDFormat&gt;&lt;NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:transient&lt;/NameIDFormat&gt;&lt;/AttributeAuthorityDescriptor&gt;&lt;/EntityDescriptor&gt;</div></div></body></html>