<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>I know this error has been discussed to death, and I apologize for dragging it back out of the grave, but I can't figure out my particular permutation...</div>
<div><br>
</div>
<div>I have a Shibboleth 2 service provider. I generated metadata using the .../Shibboleth.sso/Metadata handler and my local registrar sent that to InCommon. Someone at InCommon has confirmed that they loaded the metadata. The metadata includes the following <span style="background-color: rgb(255, 255, 255); font-family: helvetica, arial, clean, sans-serif; line-height: 20.46875px; text-align: left; ">AssertionConsumerService
endpoints:</span></div>
<div><span style="background-color: rgb(255, 255, 255); font-family: helvetica, arial, clean, sans-serif; line-height: 20.46875px; text-align: left; "><br>
</span></div>
<div>
<div>Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SLO/Artifact"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML2/POST" index="1"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML2/Artifact" index="3"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML2/ECP" index="4"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML/POST" index="5"/></div>
<div> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://dmp2-dev.cdlib.org/Shibboleth.sso/SAML/Artifact" index="6"/></div>
</div>
<div><br>
</div>
<div>I am using a single IDP, the one that the InCommon test site says I should be using for UC Office of the President:</div>
<div><br>
</div>
<div><SSO entityID="urn:mace:incommon:ucop.edu">SAML2 SAML1</SSO></div>
<div><br>
</div>
<div>When I attempt to access a protected URL on my SP, I am redirected to the UCOP IDP and prompted to authenticate. Upon successful authentication, I get the "No peer endpoint available to which to send SAML response" error.</div>
<div><br>
</div>
<div>There is absolutely nothing in any of my shibd log files on the SP. The last log entry relates to the restart of the shibd daemon. There are no errors or warnings after that.</div>
<div><br>
</div>
<div>I've attached the complete metadata file and the complete shibboleth2.xml file. I don't have access to anything for the IDP, but if I can just get to a point where I'm confident that my SP configuration and metadata are good, that would be a step forward.
Thanks in advance for any assistance.</div>
<div><br>
</div>
<div>--Ken</div>
<div><br>
</div>
<div>
<div>
<div style="font-family: Consolas; font-size: medium; ">------------------------------------------------------------</div>
<div style="font-family: Consolas; font-size: medium; ">Ken Weiss <a href="mailto:ken.weiss@ucop.edu">ken.weiss@ucop.edu</a></div>
<div style="font-family: Consolas; font-size: medium; ">UC Office of the President 510-587-6311 (office)</div>
<div style="font-family: Consolas; font-size: medium; ">California Digital Library 916-905-6933 (mobile)</div>
<div style="font-family: Consolas; font-size: medium; ">UC Curation Center</div>
<div style="font-family: Consolas; font-size: medium; ">415 20th Street, 4th Floor</div>
<div style="font-family: Consolas; font-size: medium; ">Oakland, CA 94612</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
<div><br>
</div>
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Trajan Pro";
panose-1:2 2 5 2 5 5 6 2 3 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Arial","sans-serif";
color:black;}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:24.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:16.0pt;
font-family:"Arial","sans-serif";
color:black;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:10.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:14.0pt;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
margin-top:10.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:13.0pt;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;}
h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
margin-top:10.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:14.0pt;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;}
h5
{mso-style-priority:9;
mso-style-link:"Heading 5 Char";
margin-top:10.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:13.0pt;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;}
h6
{mso-style-priority:9;
mso-style-link:"Heading 6 Char";
margin-top:10.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:11.0pt;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#330099;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#CCCC33;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Trajan Pro","serif";
color:windowtext;}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Arial","sans-serif";
color:black;
font-weight:bold;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Arial","sans-serif";
color:black;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Arial","sans-serif";
color:black;}
span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Arial","sans-serif";
color:black;}
span.Heading5Char
{mso-style-name:"Heading 5 Char";
mso-style-priority:9;
mso-style-link:"Heading 5";
font-family:"Arial","sans-serif";
color:black;}
span.Heading6Char
{mso-style-name:"Heading 6 Char";
mso-style-priority:9;
mso-style-link:"Heading 6";
font-family:"Arial","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</body>
</html>