Login to ADFS fails after upgrade to Elastic Application Runtime 10.3.0

Products

• VMware Tanzu Application Service

Issue/Introduction

After upgrading TAS/TPCF/EAR to 10.3.0, login fails with:

Error details: MSIS3200: No AssertionConsumerService is configured on the relying party trust 'http://login.example.com' that is a prefix match of the AssertionConsumerService URL 'https://login.example.com/saml/SSO/alias/http:/login.example.com' specified by the request. 

Environment

Elastic Application runtime v10.3.0 with AD FS configured as Identity Provider.

Cause

An additional "http:" is being added to AssertionConsumerService URL within the SP metadata.

This is a known issue in 10.3.0

Resolution

This is expected to be fixed in a future 10.3 patch release.