Shibboleth2 with ADFS

[Fong, Trevor]

Hi Everyone,



We're running Shibboleth2 IdP 2.2.0 and are trying to integrate with MS ADFS 2.0 as an SP.

ADFS is reporting the following error:



Request type: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue

Additional Data

Exception details:

Microsoft.IdentityServer.Service.SamlProtocol.SamlProtocolException:

MSIS1022: Cannot process SAML Response from ''.

Inner exception: ID4037: The key needed to verify the signature could  not be resolved from the following security key identifier 'SecurityKeyIdentifier

    (

    IsReadOnly = False,

    Count = 1,

    Clause[0] =

Microsoft.IdentityServer.Tokens.MSISSecurityKeyIdentifierClause

    )

'. Ensure that the SecurityTokenResolver is populated with the required key.

   at

Microsoft.IdentityServer.Service.Tokens.SamlMessageSecurityTokenHandler.Rea

dToken(XmlReader reader)

   at

System.IdentityModel.Tokens.SecurityTokenHandlerCollection.ReadToken(XmlRea

der reader)

   at

System.IdentityModel.Tokens.SecurityTokenElement.ReadSecurityToken(XmlEleme

nt securityTokenXml, SecurityTokenHandlerCollection securityTokenHandlers)

   at

Microsoft.IdentityServer.Service.SecurityTokenService.MSISSecurityTokenServ

ice.GetOnBehalfOfPrincipal(RequestSecurityToken request, ClaimsPrincipal

callerPrincipal)

   at

Microsoft.IdentityServer.Service.SecurityTokenService.MSISSecurityTokenServ

ice.BeginGetScope(ClaimsPrincipal principal, RequestSecurityToken request, AsyncCallback callback, Object state)

   at System.IdentityModel.SecurityTokenService.BeginIssue(ClaimsPrincipal

principal, RequestSecurityToken request, AsyncCallback callback, Object

state)

   at

System.ServiceModel.Security.WSTrustServiceContract.DispatchRequestAsyncRes

ult..ctor(DispatchContext dispatchContext, AsyncCallback asyncCallback, Object asyncState)

   at

System.ServiceModel.Security.WSTrustServiceContract.BeginDispatchRequest(Di

spatchContext dispatchContext, AsyncCallback asyncCallback, Object

asyncState)

   at

System.ServiceModel.Security.WSTrustServiceContract.BeginProcessCore(Messag

e requestMessage, WSTrustRequestSerializer requestSerializer, WSTrustResponseSerializer responseSerializer, String requestAction, String responseAction, String trustNamespace, AsyncCallback callback, Object

state)



Would anyone know what the issue is?



Thanks,

Trevor Fong


---------------------------------------------------------
Trevor Fong - Senior Programmer Analyst
University of British Columbia - Information Technology
6356 Agricultural Road, Vancouver, BC, V6T 1Z2, Canada
Ph: (604) 827-5247
Fx: (604) 827-5116

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130906/27deeb61/attachment.html