You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have been trying to set up Gerard Braad's example app. I exported my metadata to an XML file. I have been trying to use TestShib for testing. I have uploaded the meta I created to testshib.org/register. When I run the app the login link leads to the testshib login page as expected, but when I try to log (un: myself / pw: myself) I get the error message:
Error Message: No peer endpoint available to which to send SAML response
My config.js settings are almost unchanged from Gerard Braad's example :
path: process.env.SAML_PATH || '/login/callback',
entryPoint: process.env.SAML_ENTRY_POINT || 'https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO',
issuer: 'passport-saml',
cert: process.env.SAML_CERT || null
I have attached the relevant lines from the TestShib log shib-log.txt
The log line that seems to highlight the issue is: 11:10:25.654 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'passport-saml' requested the response to be returned to endpoint with ACS URL 'http://localhost:3000/login/callback' and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata
Any advice on this would be appreciated
The text was updated successfully, but these errors were encountered:
I believe I have got this issue resolved. The problem seemed to be that then line from the example (issuer: 'passport-saml') made me think a name was required here. Actually this seems to require the URL of the service provider (issuer: 'http://localhost:3000'). I haven't finished getting passport-saml working - Its now showing the callback page with an error message, but this is an improvement as it wasn't even getting there before.
I have been trying to set up Gerard Braad's example app. I exported my metadata to an XML file. I have been trying to use TestShib for testing. I have uploaded the meta I created to testshib.org/register. When I run the app the login link leads to the testshib login page as expected, but when I try to log (un: myself / pw: myself) I get the error message:
Error Message: No peer endpoint available to which to send SAML response
My config.js settings are almost unchanged from Gerard Braad's example :
path: process.env.SAML_PATH || '/login/callback',
entryPoint: process.env.SAML_ENTRY_POINT || 'https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO',
issuer: 'passport-saml',
cert: process.env.SAML_CERT || null
I have attached the relevant lines from the TestShib log
shib-log.txt
The log line that seems to highlight the issue is: 11:10:25.654 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'passport-saml' requested the response to be returned to endpoint with ACS URL 'http://localhost:3000/login/callback' and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata
Any advice on this would be appreciated
The text was updated successfully, but these errors were encountered: