<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Arial, Helvetica, sans-serif;">Hello,</span></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Arial, Helvetica, sans-serif;"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I'm seeing an issue with an SP that I'm trying to deploy using the skipEndpointValidationWhenSigned property. The authentication request
is failing with the error:<br>
<br>
WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:444] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint for relying party 'SP_ENTITY_ID_HERE': EndpointCriterion [type={urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService,
Location=ACS_URL_HERE, trusted=true]</span></div>
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Checking the SP's AuthnRequest, I found that it's not setting the ProtocolBinding attribute. Since we're relying on the signed AuthnRequest
instead of the AssertionConsumerService metadata element, would the missing ProtocolBinding explain the failure we're seeing?</span></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Arial, Helvetica, sans-serif;"><br>
</span></div>
<div id="Signature">
<div style="background-color: rgb(255, 255, 255);"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Thanks,</span></div>
<div style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif" dir="ltr" id="divtagdefaultwrapper">
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;">Tony Plovich</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"><br>
</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;">Business Information Services</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"><br>
</span><span style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;">Argonne National Laboratory</span><br>
</p>
</div>
</div>
</body>
</html>