<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt>Since you are masking all the relevant URLs please make sure
that the entityID in the metadata exactly matches the one you try
to initiate SSO with.</tt><tt><br>
</tt><tt><br>
</tt><tt>Oh and you probably have to URL-encode the entityID when
requesting SSO.</tt><tt><br>
</tt><tt><br>
</tt><tt>Refer to the examples in
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration</a></tt><tt><br>
</tt><tt><br>
</tt><tt><br>
</tt>
<div class="moz-cite-prefix"><tt>On 20.11.2017 15:52, Santu Ghosh
wrote:</tt><tt><br>
</tt></div>
<blockquote type="cite"
cite="mid:CAEi_2y1aJ_-dYM_j0_aUEyNGDPHuD784JJN-225_s3kR2EHirA@mail.gmail.com">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_signature"><tt>Hi David,</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt>Thanks for your response.</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><span style="font-size:
10.4px;">- you did not register the SP in your IdP (i.e.
load metadata of the SP)</span></tt><tt><br>
</tt></div>
<div class="gmail_signature"><span style="font-size:10.4px">
This is working fine if we test SP initiated flow</span></div>
<div class="gmail_signature"><span style="font-size:10.4px"><br>
</span></div>
<div class="gmail_signature"><tt>-the entityID in your URL
does not match the entityID in the metadata file</tt><tt><br>
</tt><tt>- you did add the metadata but forgot to reload the
MetadataResolverService (or just restart Tomcat/Jetty)</tt><span
style="font-size:10.4px"><br>
</span></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt> We have done above
mentioned two steps every time when we made any changed
(if necessary) in xml.</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt>Our IDP metadata looks like :</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><font color="#0000ff"><EntityDescriptor
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="<a
href="http://www.w3.org/2000/09/xmldsig#"
moz-do-not-send="true">http://www.w3.org/2000/09/xmldsig#</a>"
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
entityID="<a
href="https://idp.xxxxxxxx.com/idp/shibboleth"
moz-do-not-send="true">https://idp.xxxxxxxx.com/idp/shibboleth</a>"></font></tt><tt><br>
</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt>And SP metadata looks like :</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt><font color="#0000ff"><?xml
version="1.0"
encoding="UTF-8"?><md:EntityDescriptor
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
ID="https___shibboleth-sp.xxxxxxx.com_shibboleth-sp"
entityID="<a
href="https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp"
moz-do-not-send="true">https://shibboleth-sp.xxxxxxxx.com/shibboleth-sp</a>"><ds:Signature
xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#"
moz-do-not-send="true">http://www.w3.org/2000/09/xmldsig#</a>"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="<a
href="http://www.w3.org/2001/10/xml-exc-c14n#"
moz-do-not-send="true">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/><ds:SignatureMethod
Algorithm="<a
href="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
moz-do-not-send="true">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>"/><ds:Reference
URI="#https___shibboleth-sp.xxxxxxx.com_shibboleth-sp"><ds:Transforms><ds:Transform
Algorithm="<a
href="http://www.w3.org/2000/09/xmldsig#enveloped-signature"
moz-do-not-send="true">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/><ds:Transform
Algorithm="<a
href="http://www.w3.org/2001/10/xml-exc-c14n#"
moz-do-not-send="true">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></ds:Transforms><ds:DigestMethod
Algorithm="<a
href="http://www.w3.org/2000/09/xmldsig#sha1"
moz-do-not-send="true">http://www.w3.org/2000/09/xmldsig#sha1</a>"/><ds:DigestValue>OreU/14CANZdlXlhfpOdBwvjv3E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>I0g7LWoPmja4lyu/9H</font></tt><tt><br>
</tt></div>
<div class="gmail_signature"><tt><font color="#0000ff"><br>
</font></tt></div>
<div class="gmail_signature"><tt><font color="#0000ff"><br>
</font></tt></div>
<div class="gmail_signature"><tt>Can you please take a look.</tt></div>
<div class="gmail_signature"><tt><br>
</tt></div>
<div class="gmail_signature"><tt>Snahasish</tt></div>
</div>
</div>
<tt><br>
</tt>
<fieldset class="mimeAttachmentHeader"></fieldset>
<tt><br>
</tt>
</blockquote>
<tt><br>
</tt>
</body>
</html>