<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SL" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I'm new to Shibboleth and i'm trying to set it up as SSO for couple of applications. I have installed Shibboleth IdP and SP. I have managed to have the login page show up and have the user authenticate against OpenLDAP. But after that i'm
stuck with error »No peer endpoint available to which to send SAML response.«<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In the idp-process.log i see the following error:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">14:21:46.411 - INFO [Shibboleth-Access:73] - 20150413T142146Z|10.10.1.2|netshib.ixtlan-dev.si:8443|/profile/Metadata/SAML|<o:p></o:p></p>
<p class="MsoNormal">14:24:33.488 - INFO [Shibboleth-Access:73] - 20150413T142433Z|10.10.1.2|netshib.ixtlan-dev.si:8443|/profile/SAML2/Redirect/SSO|<o:p></o:p></p>
<p class="MsoNormal">14:24:33.489 - DEBUG [PROTOCOL_MESSAGE:113] -<o:p></o:p></p>
<p class="MsoNormal"><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></p>
<p class="MsoNormal"><samlp:AuthnRequest<o:p></o:p></p>
<p class="MsoNormal"> AssertionConsumerServiceURL="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/POST"<o:p></o:p></p>
<p class="MsoNormal"> Destination="https://netshib.ixtlan-dev.si:8443/idp/profile/SAML2/Redirect/SSO"<o:p></o:p></p>
<p class="MsoNormal"> ID="_5137de30e536fce539345aacbba9ffe0"<o:p></o:p></p>
<p class="MsoNormal"> IssueInstant="2015-04-13T14:24:33Z"<o:p></o:p></p>
<p class="MsoNormal"> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<o:p></o:p></p>
<p class="MsoNormal"> Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><o:p></o:p></p>
<p class="MsoNormal"> <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://netshib.ixtlan-dev.si:8443/idp/shibboleth</saml:Issuer><o:p></o:p></p>
<p class="MsoNormal"> <samlp:NameIDPolicy AllowCreate="1"/><o:p></o:p></p>
<p class="MsoNormal"></samlp:AuthnRequest><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">14:24:33.490 - WARN [org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] - SPSSODescriptor role metadata for entityID 'https://netshib.ixtlan-dev.si:8443/idp/shibboleth' could not be resolved<o:p></o:p></p>
<p class="MsoNormal">14:24:33.490 - INFO [org.opensaml.common.binding.security.SAMLProtocolMessageXMLSignatureSecurityPolicyRule:100] - SAML protocol message was not signed, skipping XML signature processing<o:p></o:p></p>
<p class="MsoNormal">14:24:33.495 - INFO [Shibboleth-Access:73] - 20150413T142433Z|10.10.1.2|netshib.ixtlan-dev.si:8443|/profile/SAML2/Redirect/SSO|<o:p></o:p></p>
<p class="MsoNormal">14:24:33.498 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447] - No return endpoint available for relying party https://netshib.ixtlan-dev.si:8443/idp/shibboleth<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">From what I have seen on some web sites the problem could be if AssertionConsumerServiceURL in SAML request would not be the same as URL in SP metadata. But the SP metadata has correct AssertionConsumerService URLs:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">….<o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/POST" index="1"/><o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/><o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/Artifact" index="3"/><o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/ECP" index="4"/><o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML/POST" index="5"/><o:p></o:p></p>
<p class="MsoNormal"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML/Artifact" index="6"/><o:p></o:p></p>
<p class="MsoNormal"> </md:SPSSODescriptor><o:p></o:p></p>
<p class="MsoNormal">….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have checked the troubleshooting page (<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors</a> ), but I'm not
not really sure what else to look for to resolve the error?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>