AuthnRequest Failure

Thu Jan 10 11:32:54 EST 2013

Hi Nate,

I was simply sending the below authorisation request to the shibboleth
IDP hoping it would allow me to authorise and give me an assertion in
response.

<?xml version="1.0" encoding="UTF-8"?>

<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceIndex="0"
AssertionConsumerServiceURL="http://readw7PhilipO:9292/TestServlet/TestP
ost" Destination="https://readw7PhilipO:8443/idp/profile/Shibboleth/SSO"
ForceAuthn="true" ID="291C1B107DD0A"
IssueInstant="2013-01-10T16:27:12.657Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
ProviderName="string" Version="2.0">

<saml2:Issuer
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://snaponglobal
.com/SAML</saml2:Issuer <https://snaponglobal.com/SAML%3c/saml2:Issuer>
>

<saml2:Subject xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">

<saml2:NameID
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">****</saml2
:NameID>

</saml2:Subject>

</saml2p:AuthnRequest>

Please let me know if you require anymore information.

Thanks.

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Nate Klingenstein
Sent: 10 January 2013 16:25
To: Shib Users
Subject: Re: AuthnRequest Failure

Philip,

Your IdP received a request to the Shibboleth SSO profile handler(SAML
1.1 and our extension) that was invalid.  There was no providerId, but
it's a necessary field for processing that request.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUnsolicitedSSO

We'll need more detail about what you're trying to accomplish and what
the flows should look like before we can help.

Thanks,

Nate.

On 10 Jan 2013, at 16:05, "Ogunleye, Philip"
<Philip.Ogunleye at snapon.com>

 wrote:

Hi,

I've got the following error in my process log, can anybody help:

16:01:23.066 - INFO [Shibboleth-Access:74] -
20130110T160123Z|fe80:0:0:0:ec7e:a277:1015:c0dc%11|readw7philipo.*****.*
**:8443|/profile/Shibboleth/SSO|

16:01:23.067 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODeco
der:72] - No providerId parameter given in Shibboleth SSO authentication
request.

16:01:23.068 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProf
ileHandler:243] - Error decoding Shibboleth SSO request

org.opensaml.ws.message.decoder.MessageDecodingException: No providerId
parameter given in Shibboleth SSO authentication request.

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODecod
er.doDecode(ShibbolethSSODecoder.java:73)
~[shibboleth-identityprovider-2.3.8.jar:na]

                at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDec
oder.java:79) ~[openws-1.4.4.jar:na]

                at
org.opensaml.saml1.binding.decoding.BaseSAML1MessageDecoder.decode(BaseS
AML1MessageDecoder.java:109) ~[opensaml-2.5.3.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.decodeRequest(ShibbolethSSOProfileHandler.java:236)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.performAuthentication(ShibbolethSSOProfileHandler.java:170)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.processRequest(ShibbolethSSOProfileHandler.java:149)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.processRequest(ShibbolethSSOProfileHandler.java:66)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatc
herServlet.service(ProfileRequestDispatcherServlet.java:84)
[shibboleth-common-1.3.7.jar:na]

                at
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:290) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCa
cheFilter.java:50) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilte
r(IdPSessionFilter.java:81) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doF
ilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.3.7.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:233) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:191) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:127) [catalina.jar:6.0.29]

                at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:102) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:109) [catalina.jar:6.0.29]

                at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:2
98) [catalina.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:85
7) [tomcat-coyote.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(
Http11Protocol.java:588) [tomcat-coyote.jar:6.0.29]

                at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.29]

                at java.lang.Thread.run(Unknown Source) [na:1.7.0_09]

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
<mailto:users-unsubscribe at shibboleth.net> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130110/9b7df53d/attachment-0001.html 