<div dir="ltr"><div class="gmail_extra"><div class="gmail_signature">Hi David,</div><div class="gmail_signature"><br></div><div class="gmail_signature">Thanks for your response.</div><div class="gmail_signature"><br></div><div class="gmail_signature"><span style="font-family:monospace;font-size:10.4px">- you did not register the SP in your IdP (i.e. load metadata of the SP)</span><br></div><div class="gmail_signature"><font face="monospace"><span style="font-size:10.4px">     This is working fine if we test SP initiated flow</span></font></div><div class="gmail_signature"><font face="monospace"><span style="font-size:10.4px"><br></span></font></div><div class="gmail_signature"><tt>-the entityID in your URL does not match the entityID in the metadata file</tt><tt><br></tt><tt>- you did add the metadata but forgot to reload the MetadataResolverService (or just restart Tomcat/Jetty)</tt><font face="monospace"><span style="font-size:10.4px"><br></span></font></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt>    We have done above mentioned two steps every time when we made any changed (if necessary) in xml.</tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt>Our IDP metadata looks like :</tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt><font color="#0000ff"><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="<a href="https://idp.xxxxxxxx.com/idp/shibboleth">https://idp.xxxxxxxx.com/idp/shibboleth</a>"></font><br></tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt>And SP metadata looks like :</tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt><br></tt></div><div class="gmail_signature"><tt><font color="#0000ff"><?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="https___shibboleth-sp.xxxxxxx.com_shibboleth-sp" entityID="<a href="https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp">https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp</a>"><ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/><ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>"/><ds:Reference URI="#https___shibboleth-sp.xxxxxxx.com_shibboleth-sp"><ds:Transforms><ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/><ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></ds:Transforms><ds:DigestMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#sha1">http://www.w3.org/2000/09/xmldsig#sha1</a>"/><ds:DigestValue>OreU/14CANZdlXlhfpOdBwvjv3E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>I0g7LWoPmja4lyu/9H</font><br></tt></div><div class="gmail_signature"><tt><font color="#0000ff"><br></font></tt></div><div class="gmail_signature"><tt><font color="#0000ff"><br></font></tt></div><div class="gmail_signature">Can you please take a look.</div><div class="gmail_signature"><br></div><div class="gmail_signature">Snahasish</div>
</div></div>