Anyconnect with SAML to shibboleth IdP

[boesch]

Hi,

I'm trying to configure Anyconnect to authenticate via SAML to a shibboleth IdP (with FTD version 6.7.0.2)

Has anyone already done this?

I wonder what I have to use as SSO URL. I've tried the one in IdP's metadata, and

also looked at the requests other SPs are using

https://idp.fqdn/profile/SAML2/POST/SSO

and also tried:

https://idp.fqdn/profile/Authn/SAML2/POST/SSO/start

But I always get the error message for stale requests.

Thanks,

Christian