<div dir="ltr"><span style="font-size:12.8px">Hi,</span><div style="font-size:12.8px">I've setup an app to act as a Service Provider on <a href="http://testshib.org/" target="_blank">testshib.org</a>.  I've uploaded my metadata (which afaik looks fine when compared against others and i see no errors in logs when uploading). And I see my EntityID at <a href="http://www.testshib.org/entities.html" target="_blank">http://www.testshib.org/<wbr>entities.html</a> (EntityID <a href="https://preprod.inscribe.education/organizations/indianau/saml/metadata" target="_blank">https://preprod.inscribe.<wbr>education/organizations/<wbr>indianau/saml/metadata</a>)</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">But when sending over an AuthnRequest I get "No peer endpoint available to which to send SAML response". This appears to be because the <span style="color:rgb(0,0,0);white-space:pre-wrap">SAMLMDRelyingPartyConfigur<wbr>ationManager can't find my configuration by the entityID which I pass in (on the querystring of the request as "providerId" which I send to </span><font color="#000000"><span style="white-space:pre-wrap"><a href="https://idp.testshib.org/idp/profile/Shibboleth/SSO" target="_blank">https://idp.testshib.org/idp/<wbr>profile/Shibboleth/SSO</a></span></font><span style="color:rgb(0,0,0);white-space:pre-wrap">). I've confirmed that the entityID in my metadata and matches what I send in providerId. Also, the AssertionConsumerServiceUrl matches in both the metadata and the AuthnRequest. I'm at a loss as to what to look at next.</span></div><div style="font-size:12.8px"><div><br></div><div>The logs show it falling back to "default" relying party config at which point it isn't going to work:</div><div><pre style="white-space:pre-wrap;color:rgb(0,0,0);word-wrap:break-word">19:14:58.385 - DEBUG [edu.internet2.middleware.<wbr>shibboleth.common.<wbr>relyingparty.provider.<wbr>SAMLMDRelyingPartyConfiguratio<wbr>nManager:128] - Looking up relying party configuration for <a href="https://preprod.inscribe.education/organizations/indianau/saml/metadata" target="_blank">https://preprod.inscribe.<wbr>education/organizations/<wbr>indianau/saml/metadata</a>
19:14:58.385 - DEBUG [edu.internet2.middleware.<wbr>shibboleth.common.<wbr>relyingparty.provider.<wbr>SAMLMDRelyingPartyConfiguratio<wbr>nManager:134] - No custom relying party configuration found for <a href="https://preprod.inscribe.education/organizations/indianau/saml/metadata" target="_blank">https://preprod.inscribe.<wbr>education/organizations/<wbr>indianau/saml/metadata</a>, looking up configuration based on metadata groups.
19:14:58.386 - DEBUG [edu.internet2.middleware.<wbr>shibboleth.common.<wbr>relyingparty.provider.<wbr>SAMLMDRelyingPartyConfiguratio<wbr>nManager:157] - No custom or group-based relying party configuration found for <a href="https://preprod.inscribe.education/organizations/indianau/saml/metadata" target="_blank">https://preprod.inscribe.<wbr>education/organizations/<wbr>indianau/saml/metadata</a>. Using default relying party configuration.
19:14:58.386 - DEBUG [edu.internet2.middleware.<wbr>shibboleth.idp.profile.saml1.<wbr>ShibbolethSSOEndpointSelector:<wbr>62] - Unable to select endpoint, no entity role metadata available.
19:14:58.387 - ERROR [edu.internet2.middleware.<wbr>shibboleth.idp.profile.<wbr>AbstractSAMLProfileHandler:<wbr>447] - No return endpoint available for relying party <a href="https://preprod.inscribe.education/organizations/indianau/saml/metadata" target="_blank">https://preprod.inscribe.<wbr>education/organizations/<wbr>indianau/saml/metadata</a></pre></div><div><br></div><div>I've attached my metadata xml and an example authnrequest.xml.</div><div><br></div><div>Any help is greatly appreciated. </div><div>Thanks so much.</div></div><div>Matt Self</div>
</div>