Invalid assertion consumer service URL

Summary

The IdP has recognized the providerId of the SP in its MetaData, but there is no AssertionConsumerService element that matches the one that was supplied by the SP.

Possible Causes and Solutions

Add an AssertionConsumerService element in the IdP MetaData entry for this SP. The location element needs to match the one your SP supplies. It usually looks like https://sp.example.org/Shibboleth.sso/SAML/Artifact or https://sp.example.org/Shibboleth.sso/SAML/POST .

The domain name for this parameter is extracted from the webserver of your SP. See the documentation of your webserver on how to change it if necessary.