Common Identity Provider Errors

This page explains the causes of some of the more common error messages seen on the USC Shibboleth Identity Provider (shibboleth.usc.edu), and is primarily useful to application administrators. If you are having trouble logging into an application, please contact the administrator of that application, or the ITS Customer Support Center.

Shibboleth SSO profile is not configured for relying party

This message indicates that the USC Identity Provider is not configured to operate with the application you tried logging in to. This is most often caused by one of a couple of different things:

This message used to appear as "Unknown service provider".

No peer endpoint available to which to send SAML response

This message indicates a mismatch between the configuration of the USC Identity Provider and the application you tried logging in to. Specifically, an invalid Assertion Consumer Service URL was requested by the application.

This message used to appear as "Invalid assertion consumer service URL".

Invalid IdP URL (HTTP 404)

This message indicates either a severe configuration error in the Shibboleth environment, or, more likely, you have a stale set of cookies in your browser or you have disabled cookies entirely in your browser security settings. Try making sure cookies are enabled, close all browser windows, then try again. If that doesn't work, try with another browser. If you know how, you can also try clearing out your browser's store of cookies which may have gotten corrupted.

This message could also be generated by going straight to the Shibboleth login page without going through a service provider, for instance by using a bookmark referencing directly: https://shibboleth.usc.edu/idp/login.jsp?actionUrl=%2Fidp%2FAuthn%2FUserPassword. You can see the error by clicking this link and trying to log in.

Be sure to create bookmarks only for application login links such as https://my.usc.edu/portal/Login or https://blackboard.usc.edu/webapps/login which will redirect properly to the Shibboleth login page with the correct information set up behind the scenes.

Still need help?

If you are still having trouble logging into an application, please contact the ITS Customer Support Center.