<div dir="ltr"><div>Integration attempt with SailPoint IIQ -- IDP initiated SSO works -- testing SP initiated (Redirect) -- came up with a conundrum.<br></div><div><br></div><div>idp-process.log<br></div><div>2019-09-12 11:21:39,016 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:410] - [716873C68D0B1759D95FXXX] - [127.0.0.1] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint for relying party '<a href="https://foo/iiq/dev">https://foo/iiq/dev</a>': EndpointCriterion [type={urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService, Binding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect, Location=<a href="http://foo.com:8080/iiq/home.jsf">http://foo.com:8080/iiq/home.jsf</a>, trusted=false]</div><div><br></div><div>Registered metadata:<br></div><div><AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="http://foo.com:8080/iiq/home.jsf">foo.com:8080/iiq/home.jsf</a>"/></div><div><br></div><div>I can't figure out why there is a 'Unable to resolve outbound message endpoint for relying party' message -- is it due to the 'trusted=false'?</div></div>