<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small">Scott,</div><div class="gmail_default"><span style="font-size:12.8000001907349px">Going to the path </span><span style="font-size:12.8000001907349px">directly does successfully redirect to our external SSO but I haven't figured out how to make this the default from the doc instructions. </span></div><div class="gmail_default"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_default"><span style="font-size:12.8000001907349px">When I test authentication with an SP I am redirected to the IdP's internal login web service so I know I've missed some steps in my set-up.</span><br></div><div class="gmail_default"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_default"><span style="font-size:12.8000001907349px">Thank you,</span></div><div class="gmail_default"><span style="font-size:12.8000001907349px">Kathy</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Mar 22, 2015 at 1:50 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 3/22/15, 1:42 PM, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br>
<br>
>On 3/21/15, 4:59 AM, "Kathy E. Wright" <<a href="mailto:kewrig@clemson.edu">kewrig@clemson.edu</a>> wrote:<br>
><br>
>>I am trying to test our 2.4 production config with a new Shibboleth IDP 3.1 install and are getting this error using the RemoteUser profile:<br>
>><br>
>>net.shibboleth.idp.authn.ExternalAuthenticationException: No conversation key found in request<br>
>><br>
>>Can anyone tell me what I am missing?<br>
><br>
>Either there's a bug nobody's reported, or there's something wrong I can't explain. You'll have to trace the redirect the IdP is performing and look at the URL it's hitting when it invokes the servlet it's running to do the authentication step.<br>
><br>
>The URL should have a query string with a parameter named "conversation" in it. That parameter apparently isn't there.<br>
<br>
</span>Also, by default the URL path should just be /idp/Authn/RemoteUser?conversation=nnnn, so that's the one to look for in a Firefox or Fiddler trace or whatever.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">
<p><font face="verdana, sans-serif">Infrastructure & Ops<br></font><span style="font-family:verdana,sans-serif;font-size:small">CCIT, 340 Computer Court<br></span><span style="font-family:verdana,sans-serif;font-size:small">Anderson, SC 29625<br></span><a href="mailto:kewrig@clemson.edu" style="font-family:verdana,sans-serif;font-size:small" target="_blank">kewrig@clemson.edu</a><u><br></u><span style="font-family:verdana,sans-serif;font-size:small">(864) 656-8133</span></p></div></div>
</div>