title: How to correctly configure SAML 2.0 SP in OWIN flow
body: <p>I am trying to use SAML using Kentor auth services in my OWIN web site. But there is something wrong with the configuration i think, as SAML return Url is not same as what i configured. There must something wrong i am doing.</p>
  
  <p>Here is the configuration</p>
  
  <pre><code>&lt;kentor.authServices entityId="https://admin.mercedes-forms.ggg.com.au" returnUrl="http://admin.mercedes-forms.ggg.com.au/Callback/Saml2"&gt;    
      &lt;identityProviders&gt;
        &lt;add entityId="https://int.smfed.extranet.daimler.com/" 
             signOnUrl="https://cdiwl-appstest.i.daimler.com/affwebservices/public/saml2sso" 
             allowUnsolicitedAuthnResponse="true" binding="HttpRedirect"&gt;
          &lt;signingCertificate fileName="~/App_Data/int.smfed.extranet.daimler.com.cer" /&gt;
        &lt;/add&gt;
      &lt;/identityProviders&gt;
      &lt;federations&gt;
        &lt;add metadataLocation="http://admin.mercedes-forms.ggg.com.au/Federation" allowUnsolicitedAuthnResponse="true" /&gt;
      &lt;/federations&gt;
      &lt;serviceCertificates&gt;
        &lt;add fileName="~/App_Data/Kentor.AuthServices.StubIdp.cer" /&gt;
      &lt;/serviceCertificates&gt;
    &lt;/kentor.authServices&gt; 
  </code></pre>
  
  <p>Here is the authentication request</p>
  
  <pre><code>&lt;saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="idaa4b00c6cd334f5c927526106a6da12f" Version="2.0" IssueInstant="2017-04-05T00:18:45Z" Destination="https://cdiwl-appstest.i.daimler.com/affwebservices/public/saml2sso" AssertionConsumerServiceURL="https://admin.mercedes-forms.ggg.com.au/AuthServices/Acs"&gt;
    &lt;saml2:Issuer&gt;https://admin.mercedes-forms.ggg.com.au&lt;/saml2:Issuer&gt;
  &lt;/saml2p:AuthnRequest&gt;
  </code></pre>
  
  <p>Thanks in advance.</p>