Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TestShib: Error Message: No peer endpoint available to which to send SAML response #209

Closed
paultrotter50 opened this issue May 8, 2017 · 1 comment

Comments

@paultrotter50
Copy link

I have been trying to set up Gerard Braad's example app. I exported my metadata to an XML file. I have been trying to use TestShib for testing. I have uploaded the meta I created to testshib.org/register. When I run the app the login link leads to the testshib login page as expected, but when I try to log (un: myself / pw: myself) I get the error message:
Error Message: No peer endpoint available to which to send SAML response

My config.js settings are almost unchanged from Gerard Braad's example :
path: process.env.SAML_PATH || '/login/callback',
entryPoint: process.env.SAML_ENTRY_POINT || 'https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO',
issuer: 'passport-saml',
cert: process.env.SAML_CERT || null

I have attached the relevant lines from the TestShib log
shib-log.txt

The log line that seems to highlight the issue is: 11:10:25.654 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'passport-saml' requested the response to be returned to endpoint with ACS URL 'http://localhost:3000/login/callback' and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata

Any advice on this would be appreciated

@paultrotter50
Copy link
Author

I believe I have got this issue resolved. The problem seemed to be that then line from the example (issuer: 'passport-saml') made me think a name was required here. Actually this seems to require the URL of the service provider (issuer: 'http://localhost:3000'). I haven't finished getting passport-saml working - Its now showing the callback page with an error message, but this is an improvement as it wasn't even getting there before.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants