Yet another Idp error after SP upgrade
Mike Flynn
shibbolethlynda at yahoo.com
Mon Aug 12 14:24:32 EDT 2013
It varies depending on the IDp but it looks like authN signing is not working...
In my config I have this:
<RelyingParty Name="usjoneslanglasalle:default:entityid" signing ="true"/>
<RelyingParty Name="MWG:PRO:Lynda:SAML2:IdP" signing ="true"/>
<RelyingParty Name="https://fed.erau.edu/fed/idp" signing ="true"/>
<RelyingParty Name="http://adfs.engauge.com/adfs/services/trust" signing ="true"/>
<RelyingParty Name="http://login.oliverwymangroup.com/adfs/services/trust" signing ="true"/>
<RelyingParty Name="https://adfs.gmcr.com/adfs/services/trust" signing ="true"/>
<RelyingParty Name="http://studentfs.studygroup.com/adfs/services/trust" signing ="true"/>
<RelyingParty Name="http://fs.dolby.com/adfs/services/trust" signing ="true"/>
<RelyingParty Name="ping.mbopartners.com:saml2" signing ="true"/>
<RelyingParty Name="localhost:default:entityId" signing ="true"/>
Worked fine on the old system and shibd -check does not complain about them...
________________________________
From: Paul Hethmon <paul.hethmon at clareitysecurity.com>
To: Shib Users <users at shibboleth.net>
Sent: Monday, August 12, 2013 11:16 AM
Subject: Re: Yet another Idp error after SP upgrade
Have you asked the IdP for the details of the error they are sending you? Perhaps that would help find the source.
Paul
From: Mike Flynn <shibbolethlynda at yahoo.com>Reply-To: Shibboleth Users <users at shibboleth.net>
Date: Monday, August 12, 2013 2:14 PM
To: Shibboleth Users <users at shibboleth.net>
Subject: Re: Yet another Idp error after SP upgrade
Well, you folks are saying that I changed an entityID etc to cause this error - but like I said - I copied etc verbatim. No change.... Only certain IDps are failing (and still failing now). In the logs I am getting things like this:
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130812/6fb74b60/attachment.html
More information about the users
mailing list