title: No IDP was configured, please update included metadata with at least one IDP
body: <p>Hi I am getting below exception while accessing SAML url. this primarily problem with the metadata_idp used. As this is working with other  IDP with different metadata. Please help me to find out the problem in metadata xml.</p>
  
  <pre><code>  javax.servlet.ServletException: org.opensaml.saml2.metadata.provider.MetadataProviderException: No IDP was configured, please update included metadata with at least one IDP
  org.springframework.security.saml.SAMLEntryPoint.commence(SAMLEntryPoint.java:161)
  org.springframework.security.saml.SAMLEntryPoint.doFilter(SAMLEntryPoint.java:107)
  </code></pre>
  
  <p>My idpmetadat.xml configured is as below.</p>
  
  <h2>idp.xml</h2>
  
  <p><div class="snippet" data-lang="js" data-hide="false">
  <div class="snippet-code">
  <pre class="snippet-code-html lang-html prettyprint-override"><code>&lt;?xml version="1.0" encoding="UTF-8" ?&gt;
  &lt;md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
   ID="idfdmoAYqQtEozWEOcEj5IgJWhE1k" entityID="https://example.com/nidp/saml2/metadata"&gt;
   &lt;ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
    &lt;ds:SignedInfo&gt;
     &lt;CanonicalizationMethod xmlns="http://www.w3.org/2000/09/xmldsig#"
      Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /&gt;
     &lt;ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /&gt;
     &lt;ds:Reference URI="#idfdmoAYqQtEozWEOcEj5IgJWhE1k"&gt;
      &lt;ds:Transforms&gt;
       &lt;ds:Transform
        Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /&gt;
       &lt;ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /&gt;
      &lt;/ds:Transforms&gt;
      &lt;ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /&gt;
      &lt;DigestValue xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;4UvquLeqvOeKQsO/e3XZdP7pGUE=
      &lt;/DigestValue&gt;
     &lt;/ds:Reference&gt;
    &lt;/ds:SignedInfo&gt;
    &lt;SignatureValue xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
     fuisfhifhsfif
  &lt;/SignatureValue&gt;
    &lt;ds:KeyInfo&gt;
     &lt;ds:X509Data&gt;
      &lt;ds:X509Certificate&gt;
       
  &lt;/ds:X509Certificate&gt;
     &lt;/ds:X509Data&gt;
    &lt;/ds:KeyInfo&gt;
   &lt;/ds:Signature&gt;
   &lt;md:AttributeAuthorityDescriptor ID="idWBVe5DrgqPvsjol4GsECxwBoARs"
    protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"&gt;
    &lt;md:KeyDescriptor use="signing"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:KeyDescriptor use="encryption"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/soap" /&gt;
    &lt;md:AssertionIDRequestService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://example.com/nidp/saml2/soap" /&gt;
    &lt;md:AssertionIDRequestService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI" Location="https://example.com/nidp/saml2/assertion" /&gt;
   &lt;/md:AttributeAuthorityDescriptor&gt;
   &lt;md:IDPSSODescriptor ID="id5dNezhGwQ3I1nafN2lvcCnG0hFg"
    protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"&gt;
    &lt;md:KeyDescriptor use="signing"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:KeyDescriptor use="encryption"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:ArtifactResolutionService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://example.com/nidp/saml2/soap"
     index="0" isDefault="true" /&gt;
    &lt;md:SingleLogoutService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://example.com/nidp/saml2/slo"
     ResponseLocation="https://example.com/nidp/saml2/slo_return" /&gt;
    &lt;md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/soap" /&gt;
    &lt;md:SingleLogoutService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/slo"
     ResponseLocation="https://example.com/nidp/saml2/slo_return" /&gt;
    &lt;md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/soap" /&gt;
    &lt;md:ManageNameIDService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://example.com/nidp/saml2/rni"
     ResponseLocation="https://example.com/nidp/saml2/rni_return" /&gt;
    &lt;md:ManageNameIDService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/rni"
     ResponseLocation="https://example.com/nidp/saml2/rni_return" /&gt;
    &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
    &lt;/md:NameIDFormat&gt;
    &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:transient
    &lt;/md:NameIDFormat&gt;
    &lt;md:SingleSignOnService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://example.com/nidp/saml2/sso" /&gt;
    &lt;md:SingleSignOnService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/sso" /&gt;
    &lt;md:NameIDMappingService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/soap" /&gt;
   &lt;/md:IDPSSODescriptor&gt;
   &lt;md:SPSSODescriptor ID="idit9RFI3qQPIpRJhkjqQawKkdOMk"
    protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"&gt;
    &lt;md:KeyDescriptor use="signing"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:KeyDescriptor use="encryption"&gt;
     &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
      &lt;ds:X509Data&gt;
       &lt;ds:X509Certificate&gt;
        gjvbdgjdbgjdbgjdgbjkdgbjkdgbjkdgbkdgb
  &lt;/ds:X509Certificate&gt;
      &lt;/ds:X509Data&gt;
     &lt;/ds:KeyInfo&gt;
     &lt;md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /&gt;
    &lt;/md:KeyDescriptor&gt;
    &lt;md:ArtifactResolutionService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://example.com/nidp/saml2/spsoap"
     index="0" isDefault="true" /&gt;
    &lt;md:SingleLogoutService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://example.com/nidp/saml2/spslo"
     ResponseLocation="https://example.com/nidp/saml2/spslo_return" /&gt;
    &lt;md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/spsoap" /&gt;
    &lt;md:SingleLogoutService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/spslo"
     ResponseLocation="https://example.com/nidp/saml2/spslo_return" /&gt;
    &lt;md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     Location="https://example.com/nidp/saml2/spsoap" /&gt;
    &lt;md:ManageNameIDService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://example.com/nidp/saml2/sprni"
     ResponseLocation="https://example.com/nidp/saml2/sprni_return" /&gt;
    &lt;md:ManageNameIDService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/sprni"
     ResponseLocation="https://example.com/nidp/saml2/sprni_return" /&gt;
    &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
    &lt;/md:NameIDFormat&gt;
    &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:transient
    &lt;/md:NameIDFormat&gt;
    &lt;md:AssertionConsumerService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     Location="https://example.com/nidp/saml2/spassertion_consumer"
     index="2" /&gt;
    &lt;md:AssertionConsumerService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     Location="https://example.com/nidp/saml2/spassertion_consumer"
     index="1" /&gt;
    &lt;md:AssertionConsumerService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     Location="https://example.com/nidp/saml2/spassertion_consumer"
     index="0" isDefault="true" /&gt;
   &lt;/md:SPSSODescriptor&gt;
   &lt;md:Organization&gt;
    &lt;md:OrganizationName xml:lang="en"&gt;Preferred 
     Company&lt;/md:OrganizationName&gt;
    &lt;md:OrganizationDisplayName xml:lang="en"&gt;Preferred
       Company&lt;/md:OrganizationDisplayName&gt;
    &lt;md:OrganizationURL xml:lang="en"&gt;www.bubu.com
    &lt;/md:OrganizationURL&gt;
   &lt;/md:Organization&gt;
   &lt;md:ContactPerson contactType="administrative"&gt;
    &lt;md:Company&gt;  Company&lt;/md:Company&gt;
    &lt;md:GivenName&gt;vawani&lt;/md:GivenName&gt;
    &lt;md:SurName&gt;vawani&lt;/md:SurName&gt;
    &lt;md:EmailAddress&gt;vawani@bubu.com&lt;/md:EmailAddress&gt;
    &lt;md:TelephoneNumber&gt;xxxxxx&lt;/md:TelephoneNumber&gt;
   &lt;/md:ContactPerson&gt;
  &lt;/md:EntityDescriptor&gt;</code></pre>
  </div>
  </div>
  </p>