Remove the last slash:
<servlet-mapping> <servlet-name>FederationServlet</servlet-name> <url-pattern>/secureservlet/fed</url-pattern> </servlet-mapping> ------ Oliver Wulff Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/> Solution Architect http://coders.talend.com <http://coders.talend.com>Talend Application Integration Division http://www.talend.com ________________________________ From: Gina Choi [ginacho...@gmail.com] Sent: 21 May 2012 19:56 To: Oliver Wulff Cc: users@cxf.apache.org Subject: Re: CXF supporting scope Hi Oliver, I am looking at org.apache.cxf.fediz.tomcat.FederationAuthenticator.java(line 421 - 441). You have following lines and value of requestURL is "/fedizhelloworld/secureservlet/fed/". You send "wreply" to STS and you should be able to retrieve it from STS response. I don't know how Tomcat manage savedRequestURL(session) internally. requestURI = savedRequestURL(session); response.sendRedirect(response.encodeRedirectURL(requestURI)); On Mon, May 21, 2012 at 1:49 PM, Gina Choi <ginacho...@gmail.com<mailto:ginacho...@gmail.com>> wrote: Hi Oliver, I am using \fediz\trunk\examples\simpleWebapp. On Mon, May 21, 2012 at 1:44 PM, Oliver Wulff <owu...@talend.com<mailto:owu...@talend.com>> wrote: Hi Gina Which example do you use? I've to sync that as the simple example uses: /fedizhelloworld/secureservlet/fed/ whereas the wsclient example uses: /fedizhelloworld/secure/fedservlet Maybe that's the issue. ------ Oliver Wulff Blog: http://owulff.blogspot.com<http://owulff.blogspot.com/> Solution Architect http://coders.talend.com