<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<!-- Template generated by Exclaimer Mail Disclaimers on 05:39:29 Thursday, 22 January 2015 -->
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">P.f33cc9b4-212d-4e9b-8e96-1b09b6dc2548 {
MARGIN: 0cm 0cm 0pt
}
LI.f33cc9b4-212d-4e9b-8e96-1b09b6dc2548 {
MARGIN: 0cm 0cm 0pt
}
DIV.f33cc9b4-212d-4e9b-8e96-1b09b6dc2548 {
MARGIN: 0cm 0cm 0pt
}
TABLE.f33cc9b4-212d-4e9b-8e96-1b09b6dc2548Table {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style>
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:24.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:14.0pt;
font-family:"Cambria","serif";
color:#365F91;
font-weight:bold;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Cambria","serif";
color:#365F91;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Times New Roman","serif";
font-weight:bold;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.error, li.error, div.error
{mso-style-name:error;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"></p>
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I initially tried with latest versions of the required software and had issues with even starting up all the services, however following combination looks to be mingling with each other and hence I have installed following software on Windows
7 Platform (Enterprise Edition with Service Pack 1)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Java JDK 1.7.0._71<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open DS 2.3.0 Build 003<o:p></o:p></p>
<p class="MsoNormal">Tomcat 8.0.15<o:p></o:p></p>
<p class="MsoNormal">Shibboleth Identity Provider 2.3.0<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Apache 2.4.10 win 64 VC 11<o:p></o:p></p>
<p class="MsoNormal">Shibboleth Service Provider 2.5.0<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For few days, I have been facing the issue reaching out to a secured page where the expected outcome is to have the IDP send a page requesting authentication details and thereby establish a SSO session.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am getting the following error page. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="error"><span lang="EN" style="color:red">opensaml::saml2md::MetadataException at (<a href="https://ushydsaytha1.us.deloitte.com:553/secure/secure.html">https://ushydsaytha1.us.deloitte.com:553/secure/secure.html</a>)<o:p></o:p></span></p>
<p><span lang="EN" style="color:red">Unable to locate metadata for identity provider (<a href="https://ushydsytha1.us.deloitte.com:6443/idp/shibboleth">https://ushydsytha1.us.deloitte.com:6443/idp/shibboleth</a>)<o:p></o:p></span></p>
<p class="MsoNormal"><img border="0" width="1019" height="366" id="Picture_x0020_2" src="cid:image002.jpg@01D0360E.2A28BFA0"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have tried to follow the below mentioned blogs/help, but could n’t have a luck in resolving the issue and would need your help in resolution.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted</a><o:p></o:p></p>
<p class="MsoNormal"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPConfigurationChanges#NativeSPConfigurationChanges-Shibboleth2.5.0ConfigurationChanges">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPConfigurationChanges#NativeSPConfigurationChanges-Shibboleth2.5.0ConfigurationChanges</a><o:p></o:p></p>
<p class="MsoNormal"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors#NativeSPTroubleshootingCommonErrors-Unabletolocatemetadataforidentityprovider%28https://identities.supervillain.edu/idp/shibboleth%29">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors#NativeSPTroubleshootingCommonErrors-Unabletolocatemetadataforidentityprovider%28https://identities.supervillain.edu/idp/shibboleth%29</a>.<o:p></o:p></p>
<p class="MsoNormal"><a href="http://stackoverflow.com/questions/24261141/unable-to-locate-metadata-for-identity-provider">http://stackoverflow.com/questions/24261141/unable-to-locate-metadata-for-identity-provider</a><o:p></o:p></p>
<p class="MsoNormal"><a href="https://wiki.library.ucsf.edu/pages/viewpage.action?pageId=296517633">https://wiki.library.ucsf.edu/pages/viewpage.action?pageId=296517633</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">following IdP and SP links are working as expected individually and having the issue with the total solution.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><u>verifying the IdP Installation<o:p></o:p></u></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://ushydsaytha1.us.deloitte.com:6443/idp/profile/Status">https://ushydsaytha1.us.deloitte.com:6443/idp/profile/Status</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><u>IdP metadata.<o:p></o:p></u></p>
<p class="MsoNormal"><a href="https://ushydsaytha1.us.deloitte.com:6443/idp/shibboleth">https://ushydsaytha1.us.deloitte.com:6443/idp/shibboleth</a><o:p></o:p></p>
<p class="MsoNormal"><a href="https://localhost:6443/idp/profile/Metadata/SAML">https://localhost:6443/idp/profile/Metadata/SAML</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><u>verifying the SP Installation<o:p></o:p></u></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://localhost/Shibboleth.sso/Status">https://localhost/Shibboleth.sso/Status</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><u>SP Metadata.<o:p></o:p></u></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://ushydsaytha1.us.deloitte.com/Shibboleth.sso/Metadata">https://ushydsaytha1.us.deloitte.com/Shibboleth.sso/Metadata</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have also tried to connect my Shibboleth SP to the testshib idp as mentioned on the site <a href="https://www.testshib.org/test.html">https://www.testshib.org/test.html</a>, Though I made some progress on reaching out to the IdP provided
login/authentication page and having below error after providing the expected authentication details.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><img border="0" width="253" height="88" id="Picture_x0020_1" src="cid:image003.jpg@01D0360E.2A28BFA0" alt="https://idp.testshib.org/idp/images/logo.jpg"><o:p></o:p></p>
<h3>ERROR<o:p></o:p></h3>
<p>Something horrible happened. If the below message states that the SAML 2 SSO Profile is not configured for you, then either you haven't
<a href="https://www.testshib.org/metadata.html">uploaded your metadata</a> yet or your SP's entityID has not yet been properly configured.<o:p></o:p></p>
<p>If your message did not meet security requirements, ensure that your SP's clock is accurately set and that you're not using the back button during the authentication process.<o:p></o:p></p>
<p>For more information, you can check out the <a href="http://idp.testshib.org/cgi-bin/idplog.cgi?lines=300">
IdP's error log</a>.<o:p></o:p></p>
<p>The <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors">
Common Errors page for the IdP at the Shibboleth Wiki</a> may help you debug the problem.<o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-family:"Calibri","sans-serif";color:red">Error Message: No peer endpoint available to which to send SAML response</span></strong><span style="color:red"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">(User is redirected to <a href="https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO">
https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO</a> )<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I could be available over the phone or live session if you would like to. Your quick response is greatly appreciated. <o:p></o:p></p>
<p class="MsoNormal">
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#002776">Satish K. Aytha SCEA, PMP</span></b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#002776"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776">Manager | Application Management Services<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776">Deloitte Consulting India Pvt Ltd.,<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776">Plot No 14 & 15, Deloitte Dr, Hitec City Layout, Madhapur, Hyderabad 500081<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776">US Direct: +1 615 718 6874| India Desk: +91 40 6670 6874| Mobile: +91 800 818 6555<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776"><a href="mailto:saytha@deloitte.com">saytha@deloitte.com</a> |
<a href="http://www.deloitte.com">www.deloitte.com</a> </span><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#C00000"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#002776"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#92D400">Please consider the environment before printing.
</span><span style="color:#92D400"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p></p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"> </p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"><br>
<font size="2" face="Verdana"><font size="2" face="Verdana"><font size="2" face="Verdana"><span lang="EN"></p>
<p>This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution
of this message, or the taking of any action based on it, by you is strictly prohibited.
</p>
<p></span></font></font></font><font size="2" face="Verdana"><font size="2" face="Verdana"><font size="2" face="Verdana">v.E.1</p>
</font></font></font><br>
<p></p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"> </p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"></p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"> </p>
<p class="f33cc9b4-212d-4e9b-8e96-1b09b6dc2548"> </p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
</body>
</html>