<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style=""><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Hello,</span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">I'm using an </span><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">ExternalApplicationOverrides</span><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
to load </span><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">ApplicationOverride</span><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">'s from separate files for
each domain I have.</span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">I'm using Apache with mod_shib and a</span><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">fter restarting
my web server I have discovered that the respective override files (containing my </span><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">ApplicationOverride</span><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
configs) are not getting loaded for IdP initiated requests.</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">If I explicitly make an SP initiated request to the domain in question, the configuration gets loaded as expected, which
can be seen in the log output.</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">The Shibboleth log contains a single entry for the IdP initiated request (the application ID is "eng"):</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="display: inline !important;">
<div style="margin: 0px;"><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.Listener [1] [eng]: dispatching message (eng/SAML2/POST)</span><br>
</div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">And mod_shib reports:</span><br>
</div>
<div style="">
<div style=""><br>
</div>
<div style="">
<div style="margin: 0px;"><span style="margin: 0px; font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">[mod_shib:error] [pid 26:tid 140266233124608] [client 172.26.128.10:47912] No destination registered for incoming message addressed
to (eng/SAML2/POST).</span><br>
</div>
<span style="margin: 0px;"></span><br>
</div>
</div>
<div style=""><span style="color: rgb(0, 0, 0); font-family: Verdana, Geneva, sans-serif; font-size: 10pt;">The error message reported in the web browser as follows:</span><br>
</div>
</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="display: inline !important; font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">shibsp::ListenerException at (https://eng.172.26.128.10.xip.io/saml/SAML2/POST)</span><span style="display: inline !important;"><span><br>
</span>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">No destination registered for incoming message addressed to (eng/SAML2/POST).</span></div>
<div><br>
</div>
<span></span></span></div>
<div style=""><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Whereas, for an SP initiated request, the Shibboleth log as follows:</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="display: inline !important;">
<div style="margin: 0px;"><span style="margin: 0px; display: inline !important; font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">...</span></div>
</span><span style="display: inline !important; font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.Listener [1]: dispatching message (eng::getHeaders::Application)</span><span style="display: inline !important;"><span><br>
</span>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Config [1]: application override (eng) not found, searching external sources</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: auto-configuring SSO initiation for protocol (SAML2)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding SessionInitiator of type (SAML2) to chain (/Login)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: auto-configuring ArtifactResolution endpoints for protocol (SAML2)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding ArtifactResolutionService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:SOAP) at (/Artifact/SOAP)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/Artifact/SOAP::run::SAML2Artifact)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: auto-configuring SSO endpoints for protocol (SAML2)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST) at (/SAML2/POST)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/SAML2/POST)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign) at (/SAML2/POST-SimpleSign)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/SAML2/POST-SimpleSign)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact) at (/SAML2/Artifact)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/SAML2/Artifact)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: adding AssertionConsumerService for Binding (urn:oasis:names:tc:SAML:2.0:bindings:PAOS) at (/SAML2/ECP)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/SAML2/ECP)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng/Login::run::SAML2SI)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.SessionInitiator.SAML2 [1]: supporting outgoing binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.SessionInitiator.SAML2 [1]: supporting outgoing binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.SessionInitiator.SAML2 [1]: supporting outgoing binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.SessionInitiator.SAML2 [1]: supporting outgoing binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Application [1]: building AttributeExtractor of type XML...</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.AttributeExtractor.XML [1]: using local resource (/etc/shibboleth/domains/eng-attribute-map.xml), will monitor for changes</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">WARN Shibboleth.AttributeExtractor.XML [1]: attribute mappings are reloadable; be sure to restart web server when adding new attribute IDs</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.AttributeExtractor.XML [1]: loading configuration from external resource...</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.AttributeExtractor.XML [1]: loaded XML resource (/etc/shibboleth/domains/eng-attribute-map.xml)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.AttributeExtractor.XML [1]: creating mapping for Attribute urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.AttributeExtractor.XML [1]: creating mapping for Attribute firstname, Format/Namespace:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.AttributeExtractor.XML [1]: creating mapping for Attribute lastname, Format/Namespace:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.AttributeExtractor.XML [1]: creating mapping for Attribute email, Format/Namespace:urn:oasis:names:tc:SAML:2.0:attrname-format:basic</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">DEBUG Shibboleth.ServiceProvider [1]: registered remoted message endpoint (eng::getHeaders::Application)</span><br>
</div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">INFO Shibboleth.Config [1]: storing externally defined application override (eng)</span><br>
</div>
<span></span>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt; color: rgb(0, 0, 0);">...</span><br>
</div>
</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<div style=""><span style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">If it helps, I can put together a working scenario using docker/compose to replicate the issue.</span></div>
<div style=""><br>
</div>
<div style=""><span style="display: inline !important; font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Any help is appreciated!</span></div>
<div style=""><span style="display: inline !important;"><br>
</span></div>
<br><br>
<P>This message is private and confidential. If you have received this message in error, please notify us and remove it from your system. Any views or opinions presented in this email are solely those of the author and might not represent those of StatPro. Warning: Although StatPro has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.</P>
</body>
</html>