<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am currently working through my first Shibboleth implementation. I’ve made it fairly far and had some success (I am able to login with the protected TestShib page).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m currently “stuck” on an issue. I’ve done a lot of reading of the documentation and groups, but I’m still having issues trying to sort this out.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My IdP server is running on IIS 7.5/Windows – explode.lcaat.ca<o:p></o:p></p>
<p class="MsoNormal">My SP is running on IIs 7.5/Windows, trying to integrated with Blackboard LMS<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am creating my Shibboleth authentication connector in blackboard, and when I am trying to test the connection, I get redirected to the logon page and I’m able to enter my credentials, but then I get the following error.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Error Message: No peer endpoint available to which to send SAML response<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I don’t see any errors in any of the logs on the SP side.<o:p></o:p></p>
<p class="MsoNormal">On the IdP side I see the following error in the idp-process log<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">12:25:45.640 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447] - No return endpoint available for relying party
<a href="https://explode.lcaat.ca/idp/shibboleth">https://explode.lcaat.ca/idp/shibboleth</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">From what I have read so far, it seems like my problem is with the SP’s metadata being unknown to the IdP. I grabbed the metadata from
<a href="https://lms.lcaat.ca/Shibboleth.sso/Metadata">https://lms.lcaat.ca/Shibboleth.sso/Metadata</a> and then saved it to C:\Program Files (x86)\Internet2\Shib2IdP\metadata\bbdev-Metadata.xml<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I then updated my relying-party.xml file on the IdP server with the bit below (in bold)<o:p></o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <!-- ========================================== --><o:p></o:p></p>
<p class="MsoNormal"> <!-- Metadata Configuration --><o:p></o:p></p>
<p class="MsoNormal"> <!-- ========================================== --><o:p></o:p></p>
<p class="MsoNormal"> <!-- MetadataProvider the combining other MetadataProviders --><o:p></o:p></p>
<p class="MsoNormal"> <metadata:MetadataProvider id="ShibbolethMetadata" xsi:type="metadata:ChainingMetadataProvider"><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <!-- Load the IdP's own metadata. This is necessary for artifact support. --><o:p></o:p></p>
<p class="MsoNormal"> <metadata:MetadataProvider id="IdPMD" xsi:type="metadata:ResourceBackedMetadataProvider"><o:p></o:p></p>
<p class="MsoNormal"> <metadata:MetadataResource xsi:type="resource:FilesystemResource" file="C:\Program Files (x86)\Internet2\Shib2Idp/metadata/idp-metadata.xml"/><o:p></o:p></p>
<p class="MsoNormal"> </metadata:MetadataProvider><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <!-- Download the metadata<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> This is the point where the posrt install program will add new metadata<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> --><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <metadata:MetadataProvider id="TestShib" xsi:type="metadata:FileBackedHTTPMetadataProvider"
<o:p></o:p></p>
<p class="MsoNormal"> metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"<o:p></o:p></p>
<p class="MsoNormal"> backingFile="C:\Program Files (x86)\Internet2\Shib2Idp/metadata/Downloaded-Metadata.xml"
<o:p></o:p></p>
<p class="MsoNormal"> /><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <b><metadata:MetadataProvider id="lms.lcaat.ca" xsi:type="metadata:ResourceBackedMetadataProvider"><o:p></o:p></b></p>
<p class="MsoNormal"><b> <metadata:MetadataResource xsi:type="resource:FilesystemResource" file="C:\Program Files (x86)\Internet2\Shib2Idp/metadata/bbdev-Metadata.xml" /><o:p></o:p></b></p>
<p class="MsoNormal"><b> </metadata:MetadataProvider><o:p></o:p></b></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> </metadata:MetadataProvider><o:p></o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I also read that SAML tracer would be a value tool. I capture the trace and decoded it, but my inexperienced eye doesn’t see a mismatch.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Verdana","sans-serif";color:black;background:white">Decoded Output:</span><span style="font-size:8.5pt;font-family:"Verdana","sans-serif";color:black"><br>
<span style="background:white"><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://lms.lcaat.ca/Shibboleth.sso/SAML2/POST" Destination="https://explode.lcaat.ca:444/idp/profile/SAML2/Redirect/SSO" ID="_6240d39343efcb6c8452e29fe7006b6a"
IssueInstant="2014-09-30T16:25:45Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://explode.lcaat.ca/idp/shibboleth</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Verdana","sans-serif";color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Verdana","sans-serif";color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal">I would love any advice or help on this. I feel I’m close, but still so far off!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#E51937">Dave Vernon<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black"><a href="mailto:dvernon@loyalistc.on.ca"><span style="color:blue">dvernon@loyalistc.on.ca</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black"><a href="http://loyalistcollege.com/"><span style="color:blue">loyalistcollege.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><a href="http://www.loyalistcollege.com/"><span style="font-size:13.5pt;font-family:"Times New Roman","serif";color:blue;text-decoration:none"><img border="0" width="76" height="66" id="Picture_x0020_1" src="cid:image001.png@01CFDCAA.D207EEC0" alt="Loyalist College"></span></a><a href="https://www.facebook.com/loyalistcollege"><span style="font-size:13.5pt;font-family:"Times New Roman","serif";color:blue;text-decoration:none"><img border="0" width="43" height="33" id="Picture_x0020_2" src="cid:image002.png@01CFDCAA.D207EEC0" alt="Facebook"></span></a><a href="https://twitter.com/loyalistcollege"><span style="font-size:13.5pt;font-family:"Times New Roman","serif";color:blue;text-decoration:none"><img border="0" width="33" height="33" id="Picture_x0020_3" src="cid:image003.png@01CFDCAA.D207EEC0" alt="Twitter"></span></a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>