...
Upon an authentication context-based error, the user's browser would be redirected to the following URL. (Note that line breaks have been added and parameters decoded for readability.) The second status code will depend on why things failed so may vary.
| Code Block |
|---|
http://sp.example.org/error?
&requestURL=https://sp.example.org/Shibboleth.sso/SAML2/POST
&errorType=opensaml::FatalProfileException
&errorText=SAML response contained an error.
&RelayState=https://example.org/secure/getattrs
&entityID=https://idp.example.org/idp/shibboleth
&statusCode=urn:oasis:names:tc:SAML:2.0:status:Responder
&statusCode2=urn:oasis:names:tc:SAML:2.0:status:AuthnFailed |
...