Search results

...r going to be registered in the UK federation) then this should be a https URL. Examples: ...''does not have to resolve to anything'''''. It's just a unique name and a URL is only being used because it provide a an easy way to create a unique name

...s. https) of the ACS URLs in the generated metadata will match that of the URL used to generate it. That's fine for a http-only website, but for one that ...ntication request it includes (typically in the 'shire' parameter) the ACS URL to which it wants the results returned on this occasion.

# authentication reply in the current URL # decode the reply, it's been tampered with, or the URL looks bogus

...tions after the login stage, or if the WLS authors make any changes to the URL structure, form fields, or other aspects of the site design. url='https://www.lookup.cam.ac.uk/person/crsid/mgk25' # some URL that triggers a redirect to Raven

always established, by access to a 'plain' URL, before URLs containing

=='Invalid assertion consumer service URL' or 'No peer endpoint available to which to send SAML response'== ...or some other IdP) containing the text "Invalid assertion consumer service URL" or "No peer endpoint available to which to send SAML response".'''

Session Initiator URL: https://www.wolfson.cam.ac.uk/Shibboleth.sso/Login Logout URL: https://www.wolfson.cam.ac.uk/Shibboleth.sso/Logout

...uthentication but to trigger it when the user accesses a special 'virtual' URL provided by the SP software, a set up sometimes called 'lazy session establ

...lly by the SP software (the so-called 'protocol endpoints', typically with URL paths starting /Shibboleth.sso/...) be SSL protected and this therefore mak ...adata. Getting this wrong will lead to 'Invalid assertion consumer service URL' errors when authenticating (see [[SP Metadata]]).

...t requires that the SP supports https:, at least for access to the various URL's used internally by Shibboleth. See [[SSL, certificates and security with