<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
On Aug 13, 2014, at 7:30 PM, Farzan Qureshi <<a href="mailto:fqureshi@rosmini.school.nz">fqureshi@rosmini.school.nz</a>> wrote:<br>
<div><br class="Apple-interchange-newline">
<blockquote type="cite">
<pre id="txt" style="font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"> AssertionConsumerServiceURL="<a href="https://idp.rosmini.school.nz/Shibboleth.sso/SAML2/POST">https://idp.rosmini.school.nz/Shibboleth.sso/SAML2/POST</a>"</pre>
</blockquote>
<br>
</div>
<div>This is the value its complaining about. That value from your request does not match anything in your metadata file. It also looks suspect as you are telling the IdP process to send the response back to the SP at a hostname that looks like the IdP hostname.</div>
<div><br>
</div>
<div>Did you install the IdP and SP on the same machine? If so, I would strongly recommend stopping right now and moving one of them to another machine. Running them both on the same machine is possible, but if you are doing so, then you have to make sure they
are logically independent web servers.</div>
<div><br>
</div>
<div>Paul</div>
<br>
<div apple-content-edited="true">Paul Hethmon<br>
Chief Software Architect<br>
<a href="mailto:paul.hethmon@clareitysecurity.com">paul.hethmon@clareitysecurity.com</a><br>
<br>
</div>
<br>
</body>
</html>