Yet another Idp error after SP upgrade

Mike Flynn shibbolethlynda at yahoo.com
Mon Aug 12 14:24:32 EDT 2013


It varies depending on the IDp but it looks like authN signing is not working...

In my config I have this:

 <RelyingParty Name="usjoneslanglasalle:default:entityid" signing ="true"/>
 <RelyingParty Name="MWG:PRO:Lynda:SAML2:IdP" signing ="true"/>
 <RelyingParty Name="https://fed.erau.edu/fed/idp" signing ="true"/>
 <RelyingParty Name="http://adfs.engauge.com/adfs/services/trust" signing ="true"/>
 <RelyingParty Name="http://login.oliverwymangroup.com/adfs/services/trust" signing ="true"/> 
 <RelyingParty Name="https://adfs.gmcr.com/adfs/services/trust" signing ="true"/>
 <RelyingParty Name="http://studentfs.studygroup.com/adfs/services/trust" signing ="true"/>
 <RelyingParty Name="http://fs.dolby.com/adfs/services/trust" signing ="true"/>
 <RelyingParty Name="ping.mbopartners.com:saml2" signing ="true"/>
 <RelyingParty Name="localhost:default:entityId" signing ="true"/>

Worked fine on the old system and shibd -check does not complain about them...


________________________________
 From: Paul Hethmon <paul.hethmon at clareitysecurity.com>
To: Shib Users <users at shibboleth.net> 
Sent: Monday, August 12, 2013 11:16 AM
Subject: Re: Yet another Idp error after SP upgrade
 


Have you asked the IdP for the details of the error they are sending you? Perhaps that would help find the source.

Paul


From: Mike Flynn <shibbolethlynda at yahoo.com>Reply-To: Shibboleth Users <users at shibboleth.net>
Date: Monday, August 12, 2013 2:14 PM
To: Shibboleth Users <users at shibboleth.net>
Subject: Re: Yet another Idp error after SP upgrade


Well, you folks are saying that I changed an entityID etc to cause this error - but like I said - I copied etc verbatim.  No change....  Only certain IDps are failing (and still failing now).  In the logs I am getting things like this:
 
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130812/6fb74b60/attachment.html 


More information about the users mailing list