Empty Logs on TestShib Two when receiving an excpetion

[Cantor, Scott]

On 5/1/15, 3:10 PM, "Jeff Marler" <jmarler at scisoc.org> wrote:

>Hi, I am sending a SAML2 token to the TestShib site (https://sp.testshib.org/Shibboleth.sso/SAML2/POST) and
> it is failing validation with the following message – 
>opensaml::FatalProfileException at (https://sp.testshib.org/Shibboleth.sso/SAML2/POST)
>Unable to locate satisfiable bearer SubjectConfirmation in assertion.
>From the opensaml2 validation source code  in (BrowserSSOProfile20Validator.cpp -

That isn't even remotely recent code, FWIW.

>Has anyone ever seen this before and is there a way to see to logged messages?

Testshib supports the browser SSO profile, not whatever it is you're trying to do, so I suspect that's the root of the problem.

> 
>Also, here is the SAMLResponse (I removed the AttributeStatement and keyinfo elements to keep the msg small) if anyone is willing to offer any suggestions. Thanks!

You're sending a bearer confirmation with a holder of key confirmation data element, that isn't right. I'm slightly surprised it's noticing, assuming that's the cause, but happy if it is.

Bearer tokens don't include keys in the confirmation data.

-- Scott