<div dir="ltr"><div dir="ltr">Hi, I'm upgrading my company's Shibboleth SP V2 to V3.  I keep getting this<br>error when I test: *Shibboleth handler invoked at unconfigured location*.  <br>My site is configured with IIS and the web.config specifies anything<br><a href="https://sso-dev.company.com/Shibboleth.sso/*" rel="noreferrer" target="_blank">https://sso-dev.company.com/Shibboleth.sso/*</a> will hit our in-house handler. <br>(I'm not sure if the error is complaining about the native SP's handler or<br>our own).  <br>I tried setting native.logger's mode to DEBUG but I can't even find a<br>native.log file on the server.  Any guidance would be greatly appreciated. <br>I've pasted the shibboleth2.xml file below.<br><br>/NOTE: While this file is setup to handle just one idp, I plan on using this<br>SP for multiple idps.  I'm just trying to get it working with the 1 for<br>now./ <div><br></div><div><SPConfig xmlns="urn:mace:shibboleth:3.0:native:sp:config"</div><div>    xmlns:conf="urn:mace:shibboleth:3.0:native:sp:config"</div><div>    clockSkew="180"></div><div><br></div><div>    <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" /></div><div>  </div><div>    <!--</div><div>    The InProcess section contains settings affecting web server modules.</div><div>    Required for IIS, but can be removed when using other web servers.</div><div>    --></div><div>    <InProcess></div><div>        <ISAPI normalizeRequest="true" safeHeaderNames="true"></div><div>            <Site id="16" name="<a href="http://sso-dev.company.com">sso-dev.company.com</a>"/></div><div>        </ISAPI></div><div>    </InProcess></div><div><br></div><div>    <RequestMapper type="Native" target="<a href="https://sso-dev.company.com/Shibboleth.sso/">https://sso-dev.company.com/Shibboleth.sso/</a>"></div><div>        <RequestMap></div><div>            <Host name="<a href="http://sso-dev.company.com">sso-dev.company.com</a>"></div><div>                <Path name="secure" authType="shibboleth" requireSession="true"/></div><div>            </Host></div><div>        </RequestMap></div><div>    </RequestMapper></div><div><br></div><div>    <ApplicationDefaults entityID="<a href="https://sso-dev.company.com/shibboleth">https://sso-dev.company.com/shibboleth</a>"</div><div>        REMOTE_USER="eppn subject-id pairwise-id persistent-id"</div><div>        cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1"></div><div><br></div><div>        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"</div><div>                  checkAddress="true" handlerSSL="true" cookieProps="https"</div><div><span style="white-space:pre">                            </span>  handlerURL="/Shibboleth.sso" ></div><div><br></div><div>            <SSO </div><div><span style="white-space:pre">                             </span>target="<a href="https://sso-dev.company.com/Shibboleth.sso/">https://sso-dev.company.com/Shibboleth.sso/</a>"</div><div><span style="white-space:pre">                                </span>discoveryProtocol="SAMLDS" discoveryURL="<a href="https://sso-dev.company.com/Shibboleth.sso/">https://sso-dev.company.com/Shibboleth.sso/</a>"></div><div>              SAML2</div><div>            </SSO></div><div><br></div><div>            <!-- SAML and local-only logout. --></div><div>            <Logout>SAML2 Local</Logout></div><div><br></div><div>            <!-- Administrative logout. --></div><div>            <LogoutInitiator type="Admin" Location="/Logout/Admin" acl="127.0.0.1 ::1" /></div><div><br></div><div>            <!-- Extension service that generates "approximate" metadata based on SP configuration. --></div><div>            <Handler type="MetadataGenerator" Location="/Metadata" signing="false"/></div><div><br></div><div>            <!-- Status reporting service. --></div><div>            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/></div><div><br></div><div>            <!-- Session diagnostic service. --></div><div>            <Handler type="Session" Location="/Session" showAttributeValues="true"/></div><div><br></div><div>            <!-- JSON feed of discovery information. --></div><div>            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/></div><div>        </Sessions></div><div><br></div><div>        <Errors supportContact="<a href="mailto:implementation@company.com">implementation@company.com</a>"</div><div>            redirectErrors="<a href="https://sso-dev.company.com/ssoerror.html">https://sso-dev.company.com/ssoerror.html</a>"/></div><div><span style="white-space:pre">                  </span></div><div><span style="white-space:pre">              </span><RelyingParty name="<a href="https://idp.jumpcloud.com/StudentJumpCloud">https://idp.jumpcloud.com/StudentJumpCloud</a>" keyName="Will Knight"/></div><div><br></div><div><span style="white-space:pre">             </span><MetadataProvider type="Chaining"></div><div><span style="white-space:pre">                    </span><MetadataProvider type="XML" path="C:\opt\shibboleth-sp\Metadata\test_student.xml"></MetadataProvider></div><div><span style="white-space:pre">                </span></MetadataProvider></div><div><br></div><div><span style="white-space:pre">            </span><!-- Map to extract attributes from SAML assertions. --></div><div>        <AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map.xml"/></div><div>        </div><div>        <!-- Default filtering policy for recognized attributes, lets other data pass. --></div><div>        <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/></div><div><br></div><div>        <!-- Simple file-based resolvers for separate signing/encryption keys. --></div><div>        <CredentialResolver type="File" use="signing"</div><div>            key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/></div><div>        <CredentialResolver type="File" use="encryption"</div><div>            key="sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem"/></div><div><span style="white-space:pre">            </span><CredentialResolver type="File" use="signing"</div><div>            certificate="jumpcloud_student.pem"/><span style="white-space:pre">      </span></div><div>        </div><div>    </ApplicationDefaults></div><div>    </div><div>    <!-- Policies that determine how to process and authenticate runtime messages. --></div><div>    <SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/></div><div><br></div><div>    <!-- Low-level configuration about protocols and bindings available for use. --></div><div>    <ProtocolProvider type="XML" validate="true" reloadChanges="false" path="protocols.xml"/></div><div><br></div><div></SPConfig></div><div> <br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div><span style="font-size:12.8px">Will Knight</span><br></div><div dir="ltr"><div>Web Developer</div><div>Quaver Music LLC</div></div></div></div></div></div></div></div>