<div dir="ltr"><div class="markdown-here-wrapper" style><p style="margin:1.2em 0px!important">Hi, I am working on a Shibboleth native 2.0 SP setup and having a bit of trouble after setting up all my load balancers and url rewrite rules. </p>
<p style="margin:1.2em 0px!important">Essentially we are getting assertions back to our SP endpoint over http, but we do not accept http on our front end load balancer.  </p>
<p style="margin:1.2em 0px!important">We are seeing the following error after logging in to any IDP and the assertion comes back.</p>
<p style="margin:1.2em 0px!important"><code style="font-size:0.85em;font-family:Consolas,Inconsolata,Courier,monospace;margin:0px 0.15em;padding:0px 0.3em;white-space:pre-wrap;border:1px solid rgb(234,234,234);border-radius:3px;display:inline;background-color:rgb(248,248,248)">To report this problem, please contact the site administrator at root@localhost.  Please include the following message in any email:  opensaml::BindingException at (http://${ourHost}.com/auth/shib/SAML2/POST)  SAML message delivered with POST to incorrect server URL.</code></p>
<p style="margin:1.2em 0px!important">The odd thing about this is that we have specifically set the endpoint as https in our metadata file. As per below. </p>
<p style="margin:1.2em 0px!important"><code style="font-size:0.85em;font-family:Consolas,Inconsolata,Courier,monospace;margin:0px 0.15em;padding:0px 0.3em;white-space:pre-wrap;border:1px solid rgb(234,234,234);border-radius:3px;display:inline;background-color:rgb(248,248,248)">&lt;md:AssertionConsumerService Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot; Location=&quot;https://${ourHost}/auth/shib/SAML2/POST&quot; index=&quot;1&quot;/&gt;</code></p>
<p style="margin:1.2em 0px!important">So my question is even though we are specifying the location as https why are we getting assertions back on http? </p>
<p style="margin:1.2em 0px!important">Thanks in advance for the help. </p>
<div title="MDH:PHByZT48c3BhbiBjbGFzcz0iIj5IaSwgSSBhbSB3b3JraW5nIG9uIGEgU2hpYmJvbGV0aCBuYXRp
dmUgMi4wIFNQIHNldHVwIGFuZCBoYXZpbmcgYSBiaXQgb2YgdHJvdWJsZSBhZnRlciBzZXR0aW5n
IHVwIGFsbCBteSBsb2FkIGJhbGFuY2VycyBhbmQgdXJsIHJld3JpdGUgcnVsZXMuJm5ic3A7PC9z
cGFuPjwvcHJlPjxwcmU+PHNwYW4gY2xhc3M9IiI+RXNzZW50aWFsbHkgd2UgYXJlIGdldHRpbmcg
YXNzZXJ0aW9ucyBiYWNrIHRvIG91ciBTUCBlbmRwb2ludCBvdmVyIGh0dHAsIGJ1dCB3ZSZuYnNw
Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IGFyaWFsLCBzYW5zLXNlcmlmOyI+ZG8g
bm90IGFjY2VwdCBodHRwIG9uIG91ciBmcm9udCBlbmQgbG9hZCBiYWxhbmNlci4gIDwvc3Bhbj48
L3ByZT48cHJlPjxzcGFuIGNsYXNzPSIiPldlIGFyZSBzZWVpbmcgdGhlIGZvbGxvd2luZyBlcnJv
ciBhZnRlciBsb2dnaW5nIGluIHRvIGFueSBJRFAgYW5kIHRoZSBhc3NlcnRpb24gY29tZXMgYmFj
ay48L3NwYW4+PC9wcmU+PHByZT48c3BhbiBjbGFzcz0iIj5gPC9zcGFuPlRvIHJlcG9ydCB0aGlz
IHByb2JsZW0sIHBsZWFzZSBjb250YWN0IHRoZSBzaXRlIGFkbWluaXN0cmF0b3IgYXQgcm9vdEBs
b2NhbGhvc3QuCgpQbGVhc2UgaW5jbHVkZSB0aGUgZm9sbG93aW5nIG1lc3NhZ2UgaW4gYW55IGVt
YWlsOgoKb3BlbnNhbWw6OkJpbmRpbmdFeGNlcHRpb24gYXQgKGh0dHA6Ly8ke291ckhvc3R9LmNv
bS9hdXRoL3NoaWIvU0FNTDIvUE9TVCkKClNBTUwgbWVzc2FnZSBkZWxpdmVyZWQgd2l0aCBQT1NU
IHRvIGluY29ycmVjdCBzZXJ2ZXIgVVJMLmA8L3ByZT48ZGl2PjxwcmU+PHNwYW4gY2xhc3M9IiI+
PGJyPjwvc3Bhbj48L3ByZT48cHJlPjxzcGFuIGNsYXNzPSIiPlRoZSBvZGQgdGhpbmcgYWJvdXQg
dGhpcyBpcyB0aGF0IHdlIGhhdmUgc3BlY2lmaWNhbGx5IHNldCB0aGUgZW5kcG9pbnQgYXMgaHR0
cHMgaW4gb3VyIG1ldGFkYXRhIGZpbGUuIEFzIHBlciBiZWxvdy4gPC9zcGFuPjwvcHJlPjxwcmU+
PHNwYW4gY2xhc3M9IiI+YCZsdDttZDpBc3NlcnRpb25Db25zdW1lclNlcnZpY2U8L3NwYW4+IDxz
cGFuIGNsYXNzPSIiPkJpbmRpbmc9PC9zcGFuPjxzcGFuIGNsYXNzPSIiPiJ1cm46b2FzaXM6bmFt
ZXM6dGM6U0FNTDoyLjA6YmluZGluZ3M6SFRUUC1QT1NUIjwvc3Bhbj4gPHNwYW4gY2xhc3M9IiI+
TG9jYXRpb249PC9zcGFuPjxzcGFuIGNsYXNzPSIiPiJodHRwczovLyR7b3VySG9zdH0vYXV0aC9z
aGliL1NBTUwyL1BPU1QiPC9zcGFuPiA8c3BhbiBjbGFzcz0iIj5pbmRleD08L3NwYW4+PHNwYW4g
Y2xhc3M9IiI+IjEiPC9zcGFuPjxzcGFuIGNsYXNzPSIiPi8mZ3Q7YDwvc3Bhbj48L3ByZT48cHJl
PjxzcGFuIGNsYXNzPSIiPjxicj48L3NwYW4+PC9wcmU+PHByZT48c3BhbiBjbGFzcz0iIj48YnI+
PC9zcGFuPjwvcHJlPjxwcmU+PHNwYW4gY2xhc3M9IiI+U28gbXkgcXVlc3Rpb24gaXMgZXZlbiB0
aG91Z2ggd2UgYXJlIHNwZWNpZnlpbmcgdGhlIGxvY2F0aW9uIGFzIGh0dHBzIHdoeSBhcmUgd2Ug
Z2V0dGluZyBhc3NlcnRpb25zIGJhY2sgb24gaHR0cD8gPC9zcGFuPjwvcHJlPjxwcmU+PHNwYW4g
Y2xhc3M9IiI+PGJyPjwvc3Bhbj48L3ByZT48cHJlPjxzcGFuIGNsYXNzPSIiPlRoYW5rcyBpbiBh
ZHZhbmNlIGZvciB0aGUgaGVscC4gPC9zcGFuPjwvcHJlPjxwcmU+PHNwYW4gY2xhc3M9IiI+PGJy
Pjwvc3Bhbj48L3ByZT48L2Rpdj4=" style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0em;padding:0;margin:0">​</div></div></div>