<div dir="ltr">We're trying to configure a CAS SP.<div><br></div><div>Acc'd to the logs, the (sanitized) entityID is "<a href="https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&redirect_url=&url">https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&redirect_url=&url</a>"</div><div><br></div><div>I tried creating metadata for it, which it wasn't pleased with.  I had to replace the occurrences of "&" with "&amp;" to get the IDP to load..</div><div><br></div><div><EntityDescriptor entityID="<a href="https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&amp;redirect_url=&amp;url">https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&amp;redirect_url=&amp;url</a>" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><br>    <SPSSODescriptor protocolSupportEnumeration="<a href="https://www.apereo.org/cas/protocol">https://www.apereo.org/cas/protocol</a>"><br>        <SingleLogoutService<br>                Binding="<a href="https://www.apereo.org/cas/protocol/logout">https://www.apereo.org/cas/protocol/logout</a>"<br>                Location="urn:mace:shibboleth:profile:CAS:logout"/><br>        <AssertionConsumerService<br>                Binding="<a href="https://www.apereo.org/cas/protocol/login">https://www.apereo.org/cas/protocol/login</a>"<br>                Location="<a href="https://testing.vialivetext.com/sso/">https://testing.vialivetext.com/sso/</a>"<br>                index="1"/><br>    </SPSSODescriptor><br></EntityDescriptor><br></div><div><br></div><div>It ignores the metadata, and drops back to the service registry (where I did add appropriate regex for their hostname).   When the IDP fields the authn request, it returns an OOB exception:</div><div><br></div><div>2019-05-24 11:21:57,271 - DEBUG [net.shibboleth.idp.cas.flow.impl.BuildRelyingPartyContextAction:103] -  x.x.x.x - Querying net.shibboleth.idp.cas.service.impl.MetadataServiceRegistry for CAS service URL <a href="https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&redirect_url=&url">https://testing.vialivetext.com/auth/cas/callback?organization_id=12345678abc&redirect_url=&url</a><br>2019-05-24 11:21:57,272 - ERROR [net.shibboleth.idp.cas:-2] - x.x.x.x - Uncaught runtime exception<br>java.lang.ArrayIndexOutOfBoundsException: 1<br> at net.shibboleth.utilities.java.support.net.URLBuilder.<init>(URLBuilder.java:119)<br>2019-05-24 11:21:57,283 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - 141.213.175.211 - A non-proceed event occurred while processing the request: RuntimeException<br>2019-05-24 11:21:57,302 - INFO [Shibboleth-Audit.SSO:275] - x.x.x.x - 20190524T152157Z||||<a href="https://www.apereo.org/cas/protocol/login|||||||||">https://www.apereo.org/cas/protocol/login|||||||||</a><br></div><div><br></div><div>Any ideas?</div><div>Liam</div></div>