AuthnFailed and SP IdP test configuration

Cantor, Scott cantor.2 at osu.edu
Sat Jun 8 12:58:30 EDT 2013


On 6/7/13 7:11 PM, "Eric Goodman" <Eric.Goodman at ucop.edu> wrote:

>Looking at this from afar (meaning, I don¹t have access to either server
>myself), I see two possible issues in the AuthnRequest you are sending:
> 
>A missing NameIDPolicy Format and a missing ³RequestedAuthnContext²
>section.

Neither are required, but if that fixes it, it suggests the "unspecified"
case isn't being handled. They should map the constant for the unspecified
AuthnContext class to the appropriate default login handler.

I doubt the NameID format is relevant here.

Good catch.

-- Scott




More information about the users mailing list