<div dir="ltr">I have the following relying-party.xml <div><br></div><div><div>    --></div><div>    <bean id="shibboleth.UnverifiedRelyingParty" parent="RelyingParty"></div><div>        <property name="profileConfigurations"></div><div>            <list></div><div>            <!-- <bean parent="SAML2.SSO" p:encryptAssertions="false" /> --></div><div>            </list></div><div>        </property></div><div>    </bean></div><div><br></div><div>    <!--</div><div>    Default configuration, with default settings applied for all profiles, and enables</div><div>    the attribute-release consent flow.</div><div>    --></div><div>    <bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty"></div><div>        <property name="profileConfigurations"></div><div>            <list></div><div>                <bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" /></div><div>                <ref bean="SAML1.AttributeQuery" /></div><div>                <ref bean="SAML1.ArtifactResolution" /></div><div>                <bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" /></div><div>                <ref bean="SAML2.ECP" /></div><div>                <ref bean="SAML2.Logout" /></div><div>                <ref bean="SAML2.AttributeQuery" /></div><div>                <ref bean="SAML2.ArtifactResolution" /></div><div><?xml version="1.0" encoding="UTF-8"?></div><div><beans xmlns="<a href="http://www.springframework.org/schema/beans">http://www.springframework.org/schema/beans</a>"</div><div>       xmlns:context="<a href="http://www.springframework.org/schema/context">http://www.springframework.org/schema/context</a>"</div><div>       xmlns:util="<a href="http://www.springframework.org/schema/util">http://www.springframework.org/schema/util</a>"</div><div>       xmlns:p="<a href="http://www.springframework.org/schema/p">http://www.springframework.org/schema/p</a>"</div><div>       xmlns:c="<a href="http://www.springframework.org/schema/c">http://www.springframework.org/schema/c</a>"</div><div>       xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</div><div>                           </div><div>       default-init-method="initialize"</div><div>       default-destroy-method="destroy"></div><div><br></div><div>    <!--</div><div>    Unverified RP configuration, defaults to no support for any profiles. Add <ref> elements to the list</div><div>    to enable specific default profile settings (as below), or create new beans inline to override defaults.</div><div>    </div><div>    "Unverified" typically means the IdP has no metadata, or equivalent way of assuring the identity and</div><div>    legitimacy of a requesting system. To run an "open" IdP, you can enable profiles here.</div><div>    --></div><div>    <bean id="shibboleth.UnverifiedRelyingParty" parent="RelyingParty"></div><div>        <property name="profileConfigurations"></div><div>            <list></div><div>            <!-- <bean parent="SAML2.SSO" p:encryptAssertions="false" /> --></div><div>            </list></div><div>        </property></div><div>    </bean></div><div><br></div><div>    <!--</div><div>    Default configuration, with default settings applied for all profiles, and enables</div><div>    the attribute-release consent flow.</div><div>    --></div><div>    <bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty"></div><div>        <property name="profileConfigurations"></div><div>            <list></div><div>                <bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" /></div><div>                <ref bean="SAML1.AttributeQuery" /></div><div>                <ref bean="SAML1.ArtifactResolution" /></div><div>                <bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" /></div><div>                <ref bean="SAML2.ECP" /></div><div>                <ref bean="SAML2.Logout" /></div><div>                <ref bean="SAML2.AttributeQuery" /></div><div>                <ref bean="SAML2.ArtifactResolution" /></div><div>                <ref bean="Liberty.SSOS" /></div><div>            </list></div><div>        </property></div><div>    </bean></div><div><br></div><div>    <bean id="r01" parent="RelyingPartyByName"</div><div>          c:relyingPartyIds="#{{'<a href="http://concursolutions.com">concursolutions.com</a>',</div><div>                                'cornerstone'}}"></div><div>        <property name="profileConfigurations"></div><div>          <list></div><div>             <bean id="b01" parent="Shibboleth.SSO"</div><div>                 p:signAssertions="false"</div><div>                 p:includeAttributeStatement="true" /></div><div>          </list></div><div>        </property></div><div>     </bean></div><div><br></div><div>     <bean id="r02" parent="RelyingPartyByName"</div><div>           c:relyingPartyIds="#{{'<a href="https://admin.dc4.pageuppeople.com">https://admin.dc4.pageuppeople.com</a>'}}"></div><div>        <property name="profileConfigurations"></div><div>          <list></div><div>             <bean id="b02" parent="SAML2.SSO"</div><div>                 p:encryptAssertions="false"</div><div>                 p:encryptNameIDs="false"</div><div>                 p:signAssertions="true"</div><div>                 p:signResponses="true" /></div><div>          </list></div><div>        </property></div><div>     </bean></div><div><br></div><div>     <bean id="r03" parent="RelyingPartyByName"</div><div>           c:relyingPartyIds="#{{'<a href="http://bucknell.maps.arcgis.com">bucknell.maps.arcgis.com</a>'}}"></div><div>        <property name="profileConfigurations"></div><div>          <list></div><div>             <bean id="b03" parent="SAML2.SSO"</div><div>                 p:postAuthenticationFlows="context-check"</div><div>                 p:encryptAssertions="false"</div><div>                 p:includeAttributeStatement="false"</div><div>                 p:signAssertions="false"</div><div>                 p:encryptNameIDs="false"</div><div>                 p:nameIDFormatPrecedence="#{{'urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified'}}" /></div><div>          </list></div><div>        </property></div><div>     </bean></div><div><br></div><div>    <!-- Container for any overrides you want to add. --></div><div><br></div><div>    <util:list id="shibboleth.RelyingPartyOverrides"></div><div><br></div><div>        <!--</div><div>        Override example that identifies a single RP by name and configures it</div><div>        for SAML 2 SSO without encryption. This is a common "vendor" scenario.</div><div>        --></div><div>        <!--</div><div>        <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="https://sp.example.org">https://sp.example.org</a>"></div><div>            <property name="profileConfigurations"></div><div>                <list></div><div>                    <bean parent="SAML2.SSO" p:encryptAssertions="false" /></div><div>                </list></div><div>            </property></div><div>        </bean></div><div>        --></div><div><br></div><div>    </util:list></div></div><div><br></div><div><br></div><div><br></div><div>When I go to the site <a href="http://bucknell.maps.arcgis.com">http://bucknell.maps.arcgis.com</a> the log file states:</div><div><br></div><div><div>2016-03-08 16:14:46,686 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer <a href="http://bucknell.maps.arcgis.com">bucknell.maps.arcgis.com</a></div><div>2016-03-08 16:14:46,689 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:293] - Resolving relying party configuration</div><div>2016-03-08 16:14:46,689 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:314] - No relying party configurations are applicable, returning the default configuration shibboleth.DefaultRelyingParty</div><div>2016-03-08 16:14:46,689 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration shibboleth.DefaultRelyingParty for request</div></div><div><br></div><div>Why would bean 'r03' not be selected?  </div><div>Is there an ancillary file that needs to be modified in order to enable the selection process? </div><div>Is there some other item that I should be looking for in the logs to determine why that bean was not selected?</div><div><br></div><div>Thanks,</div><div>Mike</div></div>