<div dir="ltr">I resolve problem. Additional to steps in last letter I add this to idp webapp web.xml:<div><div><font color="#3d85c6"><context-param></font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">      </span><param-name>idp.home</param-name></font></div><div><font color="#3d85c6"><span class="" style="white-space:pre">   </span><param-value>C:/opt/shibboleth-idp</param-value></font></div><div><font color="#3d85c6">    </context-param></font></div></div><div><font color="#3d85c6"><br></font></div><div><font color="#000000">thanks, guys :)</font></div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-08-25 10:59 GMT+03:00 Павел Шашко <span dir="ltr"><<a href="mailto:pavel.shashko@gmail.com" target="_blank">pavel.shashko@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">ok, I have reinstalled idp with default path (C:\opt\shibboleth-idp) and took clear tomcat 8.<div><br></div><div>After reinstall I have done few steps:</div><div>- <b>configure tomcat connectors</b></div><div>    <font color="#3d85c6"><Connector port="80" protocol="HTTP/1.1"</font></div><div><font color="#3d85c6">            connectionTimeout="20000"</font></div><div><font color="#3d85c6">            redirectPort="8443" /></font></div><div><font color="#3d85c6"><br></font></div><div><font color="#3d85c6">     <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"</font></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><font color="#3d85c6"> maxThreads="150"</font></div><div><font color="#3d85c6"> SSLEnabled="true"</font></div><div><font color="#3d85c6"> scheme="https"</font></div><div><font color="#3d85c6"> secure="true"</font></div><div><font color="#3d85c6"> clientAuth="want"</font></div><div><font color="#3d85c6"> keystoreFile="C:\opt\shibboleth-idp\credentials\idp-backchannel.p12"</font></div><div><font color="#3d85c6"> keystorePass="123456"</font></div><div><font color="#3d85c6"> keystoreType="PKCS12"</font></div><div><font color="#3d85c6"> trustManagerClassName="net.shibboleth.utilities.ssl.TrustAnyCertificate" /></font></div></blockquote><font color="#000000">- <b>copy to tomcat's lib dir 2 libs - trustany-ssl-1.0.0.jar and jstl-1.2.jar</b></font><div><font color="#000000">- <b>deploy idp.war to tomcat and run status.bat - all is OK</b></font></div><div><font color="#000000"><br></font></div><div><font color="#000000">Next step I deсided to test my spring saml app. Steps:</font></div><div><font color="#38761d"><b>I use this tutorial <a href="http://docs.spring.io/spring-security-saml/docs/current/reference/html/chapter-quick-start.html" target="_blank">http://docs.spring.io/spring-security-saml/docs/current/reference/html/chapter-quick-start.html</a></b></font></div><div><font color="#000000">- <b>I changed idp-metadata.xml as follows: (I add port 8443 because I think <a href="https://localhost/idp." target="_blank">https://localhost/idp.</a>.. is wrong url)</b></font></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><font color="#000000">  </font><font color="#3d85c6">SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="<a href="https://localhost:8443/idp/profile/Shibboleth/SSO" target="_blank">https://localhost:8443/idp/profile/Shibboleth/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://localhost:8443/idp/profile/SAML2/POST/SSO" target="_blank">https://localhost:8443/idp/profile/SAML2/POST/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="<a href="https://localhost:8443/idp/profile/SAML2/POST-SimpleSign/SSO" target="_blank">https://localhost:8443/idp/profile/SAML2/POST-SimpleSign/SSO</a>"/></font></div><div><font color="#3d85c6">        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="https://localhost:8443/idp/profile/SAML2/Redirect/SSO" target="_blank">https://localhost:8443/idp/profile/SAML2/Redirect/SSO</a>"/></font></div><div><font color="#3d85c6"><br></font></div></blockquote><div><font color="#000000"><b>The error is the same:</b></font></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><div><font color="#3d85c6">2015-08-25 10:33:00,425 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception</font></div></div><span class=""><div><div><font color="#3d85c6">org.springframework.webflow.definition.registry.FlowDefinitionConstructionException: An exception occurred constructing the flow 'authn/Password'</font></div></div><div><div><font color="#3d85c6">        at org.springframework.webflow.engine.builder.DefaultFlowHolder.assembleFlow(DefaultFlowHolder.java:111)</font></div></div><div><div><font color="#3d85c6">Caused by: org.springframework.webflow.engine.builder.FlowBuilderException: Unable to get the model for this flow</font></div></div><div><div><font color="#3d85c6">        at org.springframework.webflow.engine.builder.model.FlowModelFlowBuilder.doInit(FlowModelFlowBuilder.java:154)</font></div></div><div><div><font color="#3d85c6">Caused by: org.springframework.webflow.engine.model.builder.FlowModelBuilderException: Unable to find flow 'authn/conditions' to inherit from</font></div></div><div><div><font color="#3d85c6">        at org.springframework.webflow.engine.model.builder.xml.XmlFlowModelBuilder.mergeFlows(XmlFlowModelBuilder.java:635)</font></div></div><div><div><font color="#3d85c6">Caused by: org.springframework.webflow.engine.model.registry.NoSuchFlowModelException: No flow model 'authn/conditions' found</font></div></div><div><div><font color="#3d85c6">        at org.springframework.webflow.engine.model.registry.FlowModelRegistryImpl.getFlowModelHolder(FlowModelRegistryImpl.java:80)</font></div></div></span></blockquote><div><font color="#000000"><br></font></div><div><font color="#000000">I attach my idp and sp metadata files and securityContext.xml file</font></div><font color="#3d85c6"><br></font><div>please help me understand my mistake</div><div><br></div><div>/Paul</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2015-08-24 16:49 GMT+03:00 Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 8/24/15, 6:21 AM, "users on behalf of Павел Шашко" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:pavel.shashko@gmail.com" target="_blank">pavel.shashko@gmail.com</a>> wrote:<br>
<br>
>But in logs there is error:<br>
<br>
</span>You have done something very unusual with your installation to get that kind of an error. You used some kind of unusual installation location and either triggered a bug or haven't configured things to account for that.<br>
<br>
Where did you tell it to install to, and why didn't you simply accept the default of c:\opt\shibboleth-idp?<br>
<span><font color="#888888"><br>
-- Scott<br>
</font></span><div><div><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>