<div dir="ltr"><div class="gmail_default" style="font-size:small">Wow, thank you so much! I bet that will do it :)</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">--Dan</div><div class="gmail_default" style="font-size:small"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, May 15, 2020 at 1:59 PM Mak, Steve <<a href="mailto:makst@upenn.edu">makst@upenn.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_738131461101360340WordSection1">
<p class="MsoNormal"><span style="font-family:Helvetica">gustavus-mn<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><a href="http://gustavus.mn" target="_blank">gustavus.mn</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><u></u> <u></u></span></p>
<div style="border-color:rgb(181,196,223) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> on behalf of Dan Oachs <<a href="mailto:doachs@gac.edu" target="_blank">doachs@gac.edu</a>><br>
<b>Reply-To: </b>Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Date: </b>Friday, May 15, 2020 at 14:52<br>
<b>To: </b>"<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>" <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject: </b>Looking for some troubleshooting advice for setting up a SP that isn't working.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">So over the years I have successfully added quite a few SP to our IDP but this past week I have run into one that I am having trouble getting working. I believe there is some mismatch with their metadata
vs. what they are requesting.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">Here is the error log a user sees when trying to access the SP:<u></u><u></u></span></p>
</div>
<div style="margin-left:30pt">
<p class="MsoNormal">Login - Unable to Respond<u></u><u></u></p>
</div>
<div style="margin-left:30pt">
<p class="MsoNormal">The login service was unable to identify a compatible way to respond to the requested application. This is generally to due to a misconfiguration on the part of the application and should be reported to the application's support team or
owner.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">On the IDP side ( 3.3.1 - I know, we need to upgrade to 4) , I see these errors:<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:"Courier New"">idp-process.log:2020-05-15 13:13:02,959 - DEBUG [org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:126] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:
Neither candidate endpoint location '<a href="https://saml-live.scenariolearning.com/saml/acs?dest=gustavus-mn.safecolleges.com" target="_blank">https://saml-live.scenariolearning.com/saml/acs?dest=gustavus-mn.safecolleges.com</a>' nor response location 'null' matched '<a href="https://saml-live.scenariolearning.com/saml/acs?dest=gustavus.mn.safecolleges.com" target="_blank">https://saml-live.scenariolearning.com/saml/acs?dest=gustavus.mn.safecolleges.com</a>'
(ipv6 ip address removed)</span><span style="font-size:12pt"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:"Courier New"">idp-process.log:2020-05-15 13:13:02,959 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:410] - Profile Action PopulateBindingAndEndpointContexts: Unable
to resolve outbound message endpoint for relying party '<a href="http://saml-live.scenariolearning.com" target="_blank">saml-live.scenariolearning.com</a>': EndpointCriterion [type={urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService, Binding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST,
Location=<a href="https://saml-live.scenariolearning.com/saml/acs?dest=gustavus.mn.safecolleges.com" target="_blank">https://saml-live.scenariolearning.com/saml/acs?dest=gustavus.mn.safecolleges.com</a>, trusted=false] (ipv6 ip address removed)</span><span style="font-size:12pt"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">Am I correct that the error message says that the endpoint location does not match however they look identical? Is there an issue with a question mark in there? Hopefully I am just overlooking something
obvious and you all can point it out for me :)<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">The SP claims they have this working with other customers using Shibboleth. Wondering if anyone has any idea what might be wrong on my end, or what I should tell the SP they need to fix?
<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12pt">sadfasdf<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>