Google Apps using Shibboleth

[Prasanna]

Hello everyone,

I have tested Google Apps using Shibboleth few months before and it worked
fine. But recently I tried to provide SSO to Google Apps using Shibboleth
for a different account. I assume that I have done all the configuration
correctly. But still I get an error after I login into IDP page. I have
placed few screenshots for all of your reference. Kindly help me as I have
got to show demo to our clients coming friday.

*1. First figure details the user  in AD, in Google and I entered the same
username in the Shibboleth Idp login page*

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/AD-Shib-Google.jpg> 


*2. Second figure details about the error which i received*

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/error.jpg> 

*3. Idp-process.log (log file)*

14:02:43.970 - INFO [Shibboleth-Access:74] -
20121202T140243Z|172.16.0.26|dc01.imperoidm.com:443|/profile/SAML2/Redirect/SSO|

14:02:44.235 - WARN
[org.opensaml.saml2.binding.encoding.BaseSAML2MessageEncoder:134] - Relay
state exceeds 80 bytes, some application may not support this.

14:02:44.251 - INFO [Shibboleth-Audit:989] -
20121202T140244Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|lciolcpcopobomnhhlipjbeijhgkhejkpchkpefh|google.com|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://dc01.imperoidm.com/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_8db63615e57a29cb325495d603c5e893|raj|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|transientId,eduPersonScopedAffiliation,eduPersonTargetedID.old,eduPersonTargetedID,||_c2f4459eed1cb12143a2515bfb08009e,|

*4. Configuration files*

google-metadata

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/google-metadata.jpg> 


attribute filter

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/attribute-filter.jpg> 


attribute resolver

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/attribute-resolver.jpg> 

<http://shibboleth.1660669.n2.nabble.com/file/n7583436/attribute-resolver1.jpg> 



login.config
<http://shibboleth.1660669.n2.nabble.com/file/n7583436/loginconfig.jpg> 


relying party
<http://shibboleth.1660669.n2.nabble.com/file/n7583436/relying_party.jpg> 


Any help would be really appreciated. Thanks in advance.


Regards
Prasanna













-----
Prasanna V B
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Google-Apps-using-Shibboleth-tp7583436.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.