ECP authentication failure

[Jones, David A]

Working on setting up ECP.  In testing, I am trying to connect through Outlook, but it continues to prompt me for credentials.  I get the same behavior when I go directly to https://servername/idp/profile/SAML2/SOAP/ECP through a URL.   It appears the authentication component is not working for me.

The tomcat and catalina logs look like this:
FINE:  Failed authenticate() test
Aug 01, 2013 1:15:05 PM org.apache.catalina.authenticator.AuthenticatorBase invoke
FINE: Security checking request GET /idp/profile/SAML2/SOAP/ECP
Aug 01, 2013 1:15:05 PM org.apache.catalina.realm.RealmBase findSecurityConstraints
FINE:   Checking constraint 'SecurityConstraint[user authentication]' against GET /profile/SAML2/SOAP/ECP --> false
Aug 01, 2013 1:15:05 PM org.apache.catalina.realm.RealmBase findSecurityConstraints
FINE:   Checking constraint 'SecurityConstraint[ECP]' against GET /profile/SAML2/SOAP/ECP --> true
Aug 01, 2013 1:15:05 PM org.apache.catalina.authenticator.AuthenticatorBase invoke
FINE:  Calling hasUserDataPermission()
Aug 01, 2013 1:15:05 PM org.apache.catalina.realm.RealmBase hasUserDataPermission
FINE:   User data constraint already satisfied
Aug 01, 2013 1:15:05 PM org.apache.catalina.authenticator.AuthenticatorBase invoke
FINE:  Calling authenticate()
Aug 01, 2013 1:15:05 PM org.apache.catalina.authenticator.AuthenticatorBase invoke
FINE:  Failed authenticate() test

Any ideas?

Thanks,
Dave


David A. Jones
Enterprise Systems Analyst
KU Servers & Security
Office:  610-683-4880
Cell:       610-762-4618

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130801/c53efacc/attachment.html