AuthnFailed and SP IdP test configuration

[Cantor, Scott]

On 6/8/13 12:58 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 6/7/13 7:11 PM, "Eric Goodman" <Eric.Goodman at ucop.edu> wrote:
>
>>Looking at this from afar (meaning, I don¹t have access to either server
>>myself), I see two possible issues in the AuthnRequest you are sending:
>> 
>>A missing NameIDPolicy Format and a missing ³RequestedAuthnContext²
>>section.
>
>Neither are required, but if that fixes it, it suggests the "unspecified"
>case isn't being handled. They should map the constant for the unspecified
>AuthnContext class to the appropriate default login handler.

Another thought, possibly there's no default method specified in the
RelyingParty element that applies to this particular SP (probably
DefaultRelyingParty, but not necessarily).

I would have to actually mock up an IdP config to see what it does in
various cases that would lead to this behavior. It's definitely the case
that it wouldn't do this without changing defaults in some way to create a
problem.

-- Scott