I'm trying to configure WSO2's "Carbon" server to use our Shib IdP for authentication.<br><br><div>The message that shows up in my process log is..<br><br>15:25:02.734 - ERROR [org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder:200] - SAML message intended destination endpoint URI required by binding was empty<br>
15:25:02.742 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:348] - Message did not meet security requirements org.opensaml.xml.security.SecurityException: SAML message intended destination (required by binding) was not present<br>
15:25:02.895 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:312] - Decoding message with decoder binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'<br>15:25:02.897 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:344] - Error decoding authentication request message org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message<div>
<br></div><div>Stupid question. I'm getting that because the AuthnRequest looks like..</div><div><br></div><div><div><saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" ID="hcalffjcdahooaakphckclfaalgmlebdhofoepja" IssueInstant="2013-06-05T20:13:06.563Z" Version="2.0"></div>
</div><div><br></div><div>(notice the absence of a destination)</div></div><div><br></div><div>Is the top level AuthnRequest element the only place that the destination would show up? It looks like I'm having an issue decoding the message... am I having problems finding the destination because I can't decode the message?</div>
<div><br></div><div>Liam</div>