AssertionConsumerServiceUrl in SAML Request

[nedk76542230]

Has anyone had experience adding AssertionConsumerServiceUrl to their SAML 2.0 request.  Our IDP has been configured to respond to a specific endoint URL based on the value for the AssertionConsumerServiceID we pass to them in the SAML assertion. 

Thanks

 Ned

[Tuhin_Ghosh]

Hi Ned,

Please refer to the below urls. Hope this helps your query. This discusses about the implementations and some common issues.

https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy

http://shibboleth.1660669.n2.nabble.com/Reg-Invalid-assertion-consumer-service-URL-td2538116.html

Thanks

Tuhin

[subramanyav7745]

Hi,

I have recently integrated AEM 6.1  with SAML using OKTA.

These are the links that help you integrate AEM 6.1 with SAML 

debugging URL—>http://adobeaemclub.com/setting-saml-authentication/

Reference —> http://www.aemstuff.com/blogs/july/saml.html

helpx.adobe url —> https://helpx.adobe.com/experience-manager/kb/simple-saml-demo.html#Download

Hope this helps . 

If you need more help , please enable debug logging for SAML as mentioned in first URL.

[subramanyav7745]

Hi Ned,

I am sorry , I have posted the above answer assuming that you are integrating  AEM author with SAML.

But it seems you are trying to integrate dispatcher with SAML using shibboleth IDP/SP.

So to fix any issue with shibboleth you need to look at the shibboleth logs. These are available udner /var/log/shibboleth and /var/log/shibboleth-www.

What are the errors you get in those log files . Please provide the errors you see in those shibboleth logs.

I had faced lots of issues with shibboleth integration. After watching the errors in the logs I were able to fix the errors and complete the integration.

Hope this helps.

[efahmy]

We're in the same boat. Did you resolve this?