Salesforce with Shibboleth IdP

[Martin B. Smith]

On 06/07/2012 12:42 PM, Andrew Morgan wrote:
> Does anyone have a step-by-step guide for setting up Salesforce SAML v2
> with a Shibboleth IdP?
>
> I am trying to use IdP-initiated SSO, but no matter what I try, Salesforce
> gives me an error:
>
>     Login Error
>     Your login attempt using single sign-on with an identity provider
>     certificate has failed. Please contact your salesforce.com administrator
>     for more information.
>
>
> Google search hasn't turned up much content about this subject.
>
> Thanks,
>   	Andy

Hi Andy,

I'm not sure if this is helpful for your case, but we discovered that 
Salesforce doesn't support encrypted SAML assertions. They did have a 
validator that you could paste in SAML to validate it -- I'd recommend 
trying that against what the assertion you're sending, if you haven't 
already.

Cheers,
-- 
Martin B. Smith
smithmb at ufl.edu - (352) 273-1374
CNS/Open Systems Group
University of Florida

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4893 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/users/attachments/20120607/d4117139/attachment.bin