Salesforce Shibboleth Integration Instruction contributed by Michael Fraker
Attention:
Before you submit your metadata, review it. If you have '&' in the location of AssertionConsumerService tag, replace it with '&'.
For example,
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mytest.force.com/utility/login?so=00D8H0000008fiE&sc=0LE8H0000008OKu" index="2"/>
Should be replaced like this:
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mytest.force.com/utility/login?so=00D8H0000008fiE&sc=0LE8H0000008OKu" index="2"/>