[Unity-idm-discuss] Relative SAML SP metadata paths

[D B. <ba...@aw...>]

Hi,

I just ran into the fact that between version 2.5 and 3.2 the
acceptedSPMetadataSource.*.url setting changed behaviour when using
file:// urls. It now interprets these URLs relative to the unity
directory, so what was formerly
unity.saml.acceptedSPMetadataSource.sp.url=file:///etc/unity-idm/metadata.xml
became
unity.saml.acceptedSPMetadataSource.sp.url=file:///metadata.xml

Could you mention that in the docs in the description for
unity.saml.acceptedSPMetadataSource .*.url ?

It's really not obvious from the error message in the logs:

ERROR unity.server.URIAccessServiceImpl: Can not read uri:
file:///etc/unity-idm/metadata.xml
pl.edu.icm.unity.exceptions.EngineException: Can not read file from uri:
file:///etc/unity-idm/metadata.xml
        at
pl.edu.icm.unity.engine.files.URIAccessServiceImpl.readUriInternal(URIAccessServiceImpl.java:148)
~[unity-server-engine-3.2.0.jar:?]
        at
pl.edu.icm.unity.engine.files.URIAccessServiceImpl.readURI(URIAccessServiceImpl.java:71)
~[unity-server-engine-3.2.0.jar:?]

Cheers,
D