<html><body><div dir="ltr">An SP request to my IdP is triggering this error upon processing the incoming request:<div><br></div><div><span style="font-family:Menlo;font-size:11px;font-variant-ligatures:no-common-ligatures">15:16:40:803 ERROR [10.25.250.168] org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:174 > Message Handler: SAML message intended destination endpoint</span><span style="font-family:Menlo;font-size:11px"> URI required by binding was empty</span></div><div><span style="font-family:Menlo;font-size:11px"><br></span></div><div dir="ltr"><font face="Menlo"><span style="font-size:11px">Here’s that request captured in SamlTracer</span></font></div><div dir="ltr"><font face="Menlo"><span style="font-size:11px"><br></span></font></div><div dir="ltr"><p style="margin:0px;font-stretch:normal;line-height:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="color:rgb(33,118,199);font-family:Menlo;font-size:12px;font-style:normal;font-variant-caps:normal"><samlp:AuthnRequest </span><span style="color:rgb(189,54,19);font-family:Menlo;font-size:12px;font-style:normal;font-variant-caps:normal">ID=</span><font color="#a57705" face="Menlo"><span style="font-size:12px">“</span><span style="font-size:12px">•••"</span></font></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"> <span style="color:#bd3613">Version=</span><span style="color:#a57705">"2.0"</span></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(165,119,5)"><span style="font-size:12px"><span style="color:#2176c7"> </span><span style="color:#bd3613">IssueInstant=</span>"2024-04-23T23:28:33Z"</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(165,119,5)"><span style="font-size:12px"><span style="color:#2176c7"> </span><span style="color:#bd3613">ProtocolBinding=</span>"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(165,119,5)"><span style="font-size:12px"><span style="color:#2176c7"> </span><span style="color:#bd3613">AssertionConsumerServiceURL=</span>"https://.../SAML2IdentityProviderSignin.aspx"</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(165,119,5)"><span style="font-size:12px"><span style="color:#2176c7"> </span><span style="color:#738a04">xmlns:samlp=</span>"urn:oasis:names:tc:SAML:2.0:protocol"</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"> ></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(71,91,98)"><span style="font-size:12px"><span class="Apple-tab-span" style="white-space:pre"> </span><span style="color:#2176c7"><saml:Issuer </span><span style="color:#738a04">xmlns:saml=</span><span style="color:#a57705">"urn:oasis:names:tc:SAML:2.0:assertion"</span><span style="color:#2176c7">></span><a href="https://sw-ualand-pa1.apps.ad.alaska.edu/landfolio">https://sw-ualand-pa1.apps.ad.alaska.edu/landfolio</a><span style="color:#2176c7"></saml:Issuer></span></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(165,119,5)"><span style="font-size:12px"><span style="color:#475b62"><span class="Apple-tab-span" style="white-space:pre"> </span></span><span style="color:#2176c7"><samlp:NameIDPolicy </span><span style="color:#bd3613">Format=</span>"urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"</span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"><span class="Apple-tab-span" style="white-space:pre"> </span> <span style="color:#bd3613">AllowCreate=</span><span style="color:#a57705">"true"</span></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"><span class="Apple-tab-span" style="white-space:pre"> </span> /></span></p>
<p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"></samlp:AuthnRequest></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(33,118,199)"><span style="font-size:12px"><br></span></p><p style="margin:0px;font-stretch:normal;line-height:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal" dir="ltr"><font color="#2176c7" face="Menlo"><span style="font-size:12px">and the ACS in that app</span><span style="font-size:12px">’</span><span style="font-size:12px">s metadata is</span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal" dir="ltr"><font color="#2176c7" face="Menlo"><span style="font-size:12px"><br></span></font></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)"><span style="font-size:12px"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">md</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">AssertionConsumerService </span></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)"><span style="font-size:12px"><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d"><span class="Apple-tab-span" style="white-space:pre"> </span>Binding</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST”</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"> </span></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)"><span style="font-size:12px"><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d"><span class="Apple-tab-span" style="white-space:pre"> </span>Location</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures">"https://.../SAML2IdentityProviderSignin.aspx"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d">index</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures">“1"</span></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px"><span class="Apple-tab-span" style="white-space:pre"> </span>/></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px"><br></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px">Checked the ACS URLs do match exactly.</span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px"><br></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px">What is wrong with that request+metadata combination ?</span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px"><br></span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px">David St Pierre Bantz</span></p><p style="margin:0px;font-style:normal;font-variant-caps:normal;font-stretch:normal;line-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(180,36,25)" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187);font-size:12px">U Alaska IAM</span></p></div></div></body></html>