<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi,<br><br>I have done the SP initiated sso successfully with Shibboleth SP(2.5.3) previously with my clients.
<br>Currently, one of my clients wants to do the IDP initiated SSO. Here are the following info provided by the client.
<br><br>1. SAML2 response xml file.
<br>2. public key cert.
<br><br>Client mentioned that this is all they provide. They don't
exchange metadata file. Even I provided my metadata file, but they have
not used.
<br><br>Here is the configuration change I did in the SP Shibboleth shiboleth2.xml.
<br><br><Host name="www.spserver.com"><br> <Path name="user" authType="shibboleth" requireSession="false"/><br> </Host><br><br>I build the metadata file based on the SAML2 response file provided by the client.
<br><br>After the above changes,
<br>When IDP is trying to post the data, then there was an error in the
log file "XMLTooling.TrustEngine.PKIX [1]: certificate name was not
acceptable"
<br><br>Am I doing the right configuration?
<br>If not, is there any other way of doing the configuration to achieve IDP initiated SSO?
<br><br>I am struggling to do the configuration for couple of weeks. Any help is appreciated.
<br><br>Thanks
<br>srini
</div></body>
</html>