<div dir="ltr"><div>Thanks Scott/Peter. </div><div><br></div><div>In my environment, the Apache server is configured to accept the SSL connection only with the empty port or default port 443.</div><div><br></div><div><a href="https://server.name1/Shibboleth.sso/SAML2/POST">https://server.name1/Shibboleth.sso/SAML2/POST</a></div><div><a href="https://server.name1:443/Shibboleth.sso/SAML2/POST">https://server.name1:443/Shibboleth.sso/SAML2/POST</a></div><div><br></div><div>So, I configured the post back URL in OKTA(IdP) as <a href="https://server.name1/Shibboleth.sso/SAML2/POST">https://server.name1/Shibboleth.sso/SAML2/POST</a>. But, the shibboleth generates the POST url with the default port number as <a href="https://server.name1:80/Shibboleth.sso/SAML2/POST">https://server.name1:80/Shibboleth.sso/SAML2/POST</a>. This url mismatch results in the BindingException.</div><div><br></div><div>So, I want to modify the URL generated by Shibboleth. Since the handlerURL accepts only the relative value, I cannot make the Shibboleth to generate either <a href="https://server.name1/Shibboleth.sso/SAML2/POST">https://server.name1/Shibboleth.sso/SAML2/POST</a> or <a href="https://server.name1:443/Shibboleth.sso/SAML2/POST">https://server.name1:443/Shibboleth.sso/SAML2/POST</a>. </div><div><br></div><div>Thanks</div><div><br></div><div>Nara</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 16, 2015 at 6:53 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 2/16/15, 1:55 AM, "nr673 ." <<a href="mailto:nara.rama.us@gmail.com">nara.rama.us@gmail.com</a>> wrote:<br>
<br>
>When I set the absolute value for the handlerURL, the metadata prefixes<br>
>the server name twice.<br>
<br>
</span>Well, that metadata is not guaranteed to be correct, so if this affects<br>
you greatly, you're doing something wrong. But it's probably a bug and/or<br>
related to some issue with server virtualization being configured<br>
improperly so that the requests don't seem to be handled by the same vhost<br>
contained in the handlerURL.<br>
<br>
You can file a bug, but you'll need to be very detailed about the web<br>
server configuration and how you're accessing the handler.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>