Need help troubshooting: Unable to locate satisfiable bearer SubjectConfirmation in assertion

[Cantor, Scott]

On 11/27/13, 4:03 PM, "joel_emery at archibus.com" <Joel_Emery at archibus.com>
wrote:
>
>They are now reporting that after logging into the IdP they see the
>error: 'Unable to locate satisfiable bearer SubjectConfirmation in
>assertion'.

The NotOnOrAfter attribute seems to be rather behind, so I'd guess that's
the problem.

>In the SAML response below the SubjectConfirmationData/Recipient seems to
>be the ACS and not the entityID.  Is this right?

Yes.

Sorry to be a little snarky, but where do I send my invoice for debugging
their code for them? Put another way, if they want my free support, maybe
they should consider donating something to the project.

-- Scott