<div dir="ltr"><div>Thanks Martin.<br><br><br></div><div>Do we need to configure relying party as mandatory on configuration of Shibboleth as SP?<br><br></div><div>My IdP throws below error as "SAML 2 SSO profile is not configured for relying party"<br><br></div><div>I had configured only shibboleth2.xml and NO relying-party.xml is Added.<br></div><div><br><br><b>ERROR</b><br>No custom relying party configuration found for <a href="https://verizonmob.payoda.com/shibboleth">https://verizonmob.payoda.com/shibboleth</a>, looking up configuration based on metadata groups.<br>12:49:24.873 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for https://{hostname}/shibboleth. Using default relying party configuration.<br>12:49:24.876 - WARN [org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] - SPSSODescriptor role metadata for entityID 'https://{hostname}/shibboleth' could not be resolved<br>12:49:24.881 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:387] - Decoded request from relying party 'https://{hostname}/shibboleth'<br>12:49:24.882 - WARN [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:305] - No metadata for relying party https://{hostname}/shibboleth, treating party as anonymous<br>12:49:24.886 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:222] - SAML 2 SSO profile is not configured for relying party https://{hostname}/shibboleth<br>12:49:24.950 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:339] - LoginContext key cookie was not present in request<br>12:49:24.950 - DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display<br><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div>Thanks & Regards,<br></div>Prabhu Rajendran<br></div></div></div>
<br><div class="gmail_quote">On Wed, Jun 10, 2015 at 1:00 PM, Martin Haase <span dir="ltr"><<a href="mailto:Martin.Haase@daasi.de" target="_blank">Martin.Haase@daasi.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Prabhu,<br>
<br>
so it is the TestShib IdP saying this? Then there should be
something for you to be found in
<a href="https://idp.testshib.org/cgi-bin/idplog.cgi?lines=1500&logname=idp-process.log" target="_blank">https://idp.testshib.org/cgi-bin/idplog.cgi?lines=1500&logname=idp-process.log</a>
after you will have tried it again. Also be sure to check
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors</a><br>
<br>
Regards,<br>
Martin<div><div class="h5"><br>
<br>
<div>Am 10.06.2015 um 08:57 schrieb Prabhu
Rajendran:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Martin,<br>
<div><br>
Its configured to current UTC time.. But still same error...<br>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div>
<div dir="ltr">
<div>Thanks & Regards,<br>
</div>
Prabhu Rajendran<br>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Jun 10, 2015 at 12:21 PM,
Martin Haase <span dir="ltr"><<a href="mailto:Martin.Haase@daasi.de" target="_blank">Martin.Haase@daasi.de</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> Prabhu,<br>
check your system's time, it must be current.<br>
Regards,<br>
Martin
<div>
<div><br>
<br>
<div>Am 10.06.2015 um 06:34 schrieb Prabhu Rajendran:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>Hi All,<br>
<br>
<br>
</div>
We tried to install Shibboleth SP and test
it using <a href="http://testshib.org" target="_blank">testshib.org</a>.<br>
<br>
</div>
On hitting <a>https://</a>{our
hostname}/shibboleth or <a>https://</a>{our
hostname}/secure<br>
</div>
it redirects to <a href="http://testshib.org/idp/." target="_blank">testshib.org/idp/.</a>.. <br>
<br>
</div>
But throws error as "<strong>Message did not meet
security requirements"</strong>
<div>
<div>
<div>
<div>
<div><br>
<br>
<br clear="all">
<div>
<div>
<div dir="ltr">
<div>Thanks & Regards,<br>
</div>
Prabhu Rajendran<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
</div>
</div>
<pre cols="72">--
Dr. Martin Haase, Solutions Engineer
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-6
fax: +49 7071 407109-9
email: <a href="mailto:martin.haase@daasi.de" target="_blank">martin.haase@daasi.de</a>
web: <a href="http://www.daasi.de" target="_blank">www.daasi.de</a>
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
</pre>
</div>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
<pre cols="72">--
Dr. Martin Haase, Solutions Engineer
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-6
fax: +49 7071 407109-9
email: <a href="mailto:martin.haase@daasi.de" target="_blank">martin.haase@daasi.de</a>
web: <a href="http://www.daasi.de" target="_blank">www.daasi.de</a>
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
</pre>
</div></div></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>