<div dir="ltr">Happy Holidays<br><br>Sending this note out of desperation in hopes that someone else has set up shib for <a href="http://embark.com">embark.com</a>. On their end they have a misnomer called a login url for the IdP. Whatever they enter, shib simply redirects to it, log in, and then nothing. As if you simply entered a url in the web browser of your login page, went there and logged in, but it doesnt know where to go. Below are the settings I received from them, and also their SP metadata.<br><br><font face="monospace">Application Description Embark<br>SSO Protocol    SAML 2.0<br>SLO Support   No<br>AD Attributes Required      No<br>Name ID Format      email<br>AD Attribute Mapping Requried    No<br>Encrypted Assertion Yes<br>SSO Connection Type        SAML 2.0<br><br>PRODUCTION: SP Site Url     <a href="https://ucsb.embark.com/saml/login/">https://ucsb.embark.com/saml/login/</a><br>PRODUCTION: SP Entity Id   <a href="https://ucsb.embark.com">https://ucsb.embark.com</a><br>PRODUCTION: ACS Endpoint   <a href="https://ucsb.embark.com/saml/login/">https://ucsb.embark.com/saml/login/</a><br>PRODUCTION: IDP SSO URL    <a href="https://ucsb.embark.com/saml/assert">https://ucsb.embark.com/saml/assert</a><br>PRODUCTION: Metadata       <a href="https://ucsb.embark.com/saml/metadata.xml">https://ucsb.embark.com/saml/metadata.xml</a><br><br><br><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>" entityID="<a href="https://ucsb.embark.com">https://ucsb.embark.com</a>"><br><md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol"><br><md:KeyDescriptor use="signing"><br><ds:KeyInfo><br><ds:X509Data><br><ds:X509Certificate>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</ds:X509Certificate><br></ds:X509Data><br></ds:KeyInfo><br></md:KeyDescriptor><br><md:KeyDescriptor use="encryption"><br><ds:KeyInfo><br><ds:X509Data><br><ds:X509Certificate>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</ds:X509Certificate><br></ds:X509Data><br></ds:KeyInfo><br></md:KeyDescriptor><br><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="<a href="https://ucsb.embark.com/saml/assert">https://ucsb.embark.com/saml/assert</a>"/><br><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://ucsb.embark.com/saml/assert">https://ucsb.embark.com/saml/assert</a>" index="0"/></font><div><br></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Scott Gilbert</div><div>IAM/Cloud System Administrator</div><div>Enterprise Technology Services</div><div>University of California Santa Barbara</div><div><br></div></div></div></div></div></div></div></div></div>