"Error Message: Message did not meet security requirements"

[Mariam Hakobyan]

Sorry guys, debugging started to work now.

> I'm guessing that your MetadataProvider you configured in
> relying-party.xml referrs to a valid metadata file location
> "some-metadata.xml" .. this needs to be the SP metadata.

Yes, exactly. My SP's metadata is in some-metadata.xml.


> Also, the SP MD you have in your original mail contains an entityId of
> "URLMD".  This value is most-likely wrong. The value there should match what
> is configured as the entityId of the SP. It has no bearing on the
> MetadataProvider id field in your relying-party.xml file.

Kevin, you are right. "entityID" in original metadata generated by SP is "http://midp.10.39.2.130.xip.io:8080/SAML2".
I was getting "SPSSODescriptor role metadata for entityID 'http://midp.10.39.2.130.xip.io:8080/SAML2' could not be resolved" error and though that entityID should be changed to fix this issue. Now I reverted it back, though I still see "Error Message: Message did not meet security requirements" message.

Mariam Hakobyan
iOS Developer




o: 801.477.9766 / m: 37477655516
hakobyanmariam at attask.com / www.attask.com


    


On Nov 26, 2013, at 7:06 PM, "Kevin P. Foote" <kpfoote at iup.edu> wrote:

> 
> 
> 
> 
> On Tue, 26 Nov 2013, Mariam wrote:
> 
>> And I've got only logs in "idp-process.log" file with INFO label.
> 
> I find that hard to believe..
> 
> Set this one to DEBUG.. and restart your IdP container..
> 
>     <logger name="edu.internet2.middleware.shibboleth">
>         <level value="DEBUG" />
>     </logger>
> 
> 
> I'm guessing that your MetadataProvider you configured in
> relying-party.xml referrs to a valid metadata file location
> "some-metadata.xml" .. this needs to be the SP metadata.
> 
> Also, the SP MD you have in your original mail contains an entityId of
> "URLMD".  This value is most-likely wrong. The value there should match what
> is configured as the entityId of the SP. It has no bearing on the
> MetadataProvider id field in your relying-party.xml file.
> 
> I'm thinking you have some errors in your SP metadata and its consumption
> at the IdP.
> 
> 
> ------
> thanks
>  kevin.foote
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: block-bar.jpg
Type: image/jpeg
Size: 2174 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: twitter.png
Type: image/png
Size: 1219 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: facebook.png
Type: image/png
Size: 1162 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment-0001.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: googleplus.png
Type: image/png
Size: 1289 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment-0002.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: linkedin.png
Type: image/png
Size: 1199 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131126/7bbfa4c1/attachment-0003.png