<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Hi,
<div><br>
</div>
<div>Cornell’s iModules application works fine in IDP 2, but not IDP 3. Here is the error in the IDP log:</div>
<div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(255, 255, 255); background-color: rgb(44, 103, 200);">
2015-09-08 10:00:31,599|128.253.101.159 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:505] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(255, 255, 255); background-color: rgb(44, 103, 200);">
2015-09-08 10:00:31,600|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:220] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(255, 255, 255); background-color: rgb(44, 103, 200);">
2015-09-08 10:00:31,601|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:126] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Candidate endpoint location did not match
<a href="https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2">
https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2</a></div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(255, 255, 255); background-color: rgb(44, 103, 200);">
2015-09-08 10:00:31,601|128.253.101.159 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:130] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: No candidate endpoints met criteria</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(255, 255, 255); background-color: rgb(44, 103, 200);">
2015-09-08 10:00:31,601|128.253.101.159 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:402] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint</div>
<div style="font-size: 13px;"><br class="webkit-block-placeholder">
</div>
</div>
<div>In the metadata, the end point of assertionConsumerService is little different than the AssertionConsumerServiceURL(<a href="https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2">https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717&gid=2</a>)
in the AuthnRequest. Is this difference causing the problem? Does it need to be fixed on the vendor site? Since it works in IDP 2, I would like to confirm with the expert here before I bring it up to the vendor.</div>
<div><br>
</div>
<div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(195, 55, 32);">
<span style="color: #000000"> </span><span style="color: #34bbc7"><</span><span style="color: #d53bd3">md</span><span style="color: #5330e1">:</span><span style="color: #34bbc7">AssertionConsumerService
</span><span style="color: #34bd26">xmlns</span><span style="color: #5330e1">:</span><span style="color: #34bd26">md</span><span style="color: #000000">=</span>"urn:oasis:names:tc:SAML:2.0:metadata"<span style="color: #34bbc7">
</span><span style="color: #34bd26">Binding</span><span style="color: #000000">=</span>"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<span style="color: #34bbc7">
</span><span style="color: #34bd26">Location</span><span style="color: #000000">=</span>"<a href="https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717">https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=1717</a>"<span style="color: #34bbc7">
</span><span style="color: #34bd26">index</span><span style="color: #000000">=</span>"1”<span style="color: #34bbc7">/></span></div>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(195, 55, 32);">
<span style="color: #34bbc7"><br>
</span></div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(195, 55, 32);">
<br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Thanks,</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">Hong</div>
</body>
</html>