<div dir="ltr">Hello.<div>I want to configure Spring Security Ext. to work with Idp v.3.1.2.</div><div><br></div><div>I use spring tutorial from here: <a href="http://docs.spring.io/spring-security-saml/docs/current/reference/html/index.html">http://docs.spring.io/spring-security-saml/docs/current/reference/html/index.html</a></div><div><br></div><div>And Idp tutorial from here: <a href="https://wiki.shibboleth.net/confluence/display/IDP30/Installation">https://wiki.shibboleth.net/confluence/display/IDP30/Installation</a></div><div><br></div><div>My environment:</div><div>- <span style="color:rgb(0,0,0);white-space:pre-wrap">Windows Server 2008</span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap">- tomcat </span><font color="#000000"><span style="white-space:pre-wrap">7.0.52</span></font></div><div><font color="#000000"><span style="white-space:pre-wrap">- </span></font><span style="color:rgb(0,0,0);white-space:pre-wrap">jdk_version: 1.8.0_25</span></div><div><br></div><div>My steps:</div><div>1. I have installed(uziped) idp via install.bat</div><div>2. set idp.home in <context-param> in %idp.home/webapp/WEB-INF/web.xml</div><div>3. built -> deployed idp.war to tomcat</div><div>4. check <a href="http://127.0.0.1:8080/idp/status">http://127.0.0.1:8080/idp/status</a> - OK</div><div>5. set up idp and sp metadata files in %idp.home/metadata</div><div>6. create link in metadata-providers.xml to sp metadata file</div><div>    </div><div>    <font color="#3d85c6"><MetadataProvider </font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">               </span>xmlns="urn:mace:shibboleth:2.0:metadata"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">                </span>xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">             </span>xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata               <a href="http://shibboleth.net/schema/idp/shibboleth-metadata.xsd">http://shibboleth.net/schema/idp/shibboleth-metadata.xsd</a>"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">                </span>xsi:type="FilesystemMetadataProvider"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">           </span>id="LocalMetadata"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">              </span>failFastInitialization="true"</font></div><div><font color="#3d85c6"><span class="Apple-tab-span" style="white-space:pre">           </span>metadataFile="%{idp.home}/metadata/urntestpshashkoklimovsk_sp.xml"/></font></div><div><br></div><div>7. in spring security config created link to idp metadata file</div><div>    <b>in idp metadata i made this changes:</b></div><div>     <font color="#3d85c6"><SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="<a href="http://localhost:8080/idp/profile/Shibboleth/SSO">http://localhost:8080/idp/profile/Shibboleth/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="http://localhost:8080/idp/profile/SAML2/POST/SSO">http://localhost:8080/idp/profile/SAML2/POST/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="<a href="http://localhost:8080/idp/profile/SAML2/POST-SimpleSign/SSO">http://localhost:8080/idp/profile/SAML2/POST-SimpleSign/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="http://localhost:8080/idp/profile/SAML2/Redirect/SSO">http://localhost:8080/idp/profile/SAML2/Redirect/SSO</a>"/></font></div><div>8. in spring security configured to use metadata for sp from the above-described file</div><div>9. After I press initialize SSO and redirect to <a href="http://localhost:8080/idp/profile/SAML2/POST/SSO">http://localhost:8080/idp/profile/SAML2/POST/SSO</a> I see error :</div><div><h3 style="color:rgb(113,113,113);font-family:Verdana,Geneva,sans-serif;font-size:12px;line-height:18px;margin:0px;padding:0px">Web Login Service - Unsupported Request</h3><div style="color:rgb(113,113,113);font-family:Verdana,Geneva,sans-serif;font-size:12px;line-height:18px">The application you have accessed is not registered for use with this service.<br></div><div style="color:rgb(113,113,113);font-family:Verdana,Geneva,sans-serif;font-size:12px;line-height:18px"><br></div><div style="font-family:Verdana,Geneva,sans-serif;font-size:12px;line-height:18px"><font color="#000000">Firstly i thought that the problem was in sp metadata config and I check that spring use as SP-metadata file the same file as IDP reference in metadata-providers.xml.</font></div><div style="font-family:Verdana,Geneva,sans-serif;font-size:12px;line-height:18px"><font color="#000000"><br></font></div><div><font face="Verdana, Geneva, sans-serif" color="#000000"><span style="font-size:12px;line-height:18px">What else I need to set up to solve the problem?</span></font><br></div><div><font face="Verdana, Geneva, sans-serif" color="#000000"><span style="font-size:12px;line-height:18px">Please, help me.</span></font></div></div></div>