Shibboleth2 with ADFS
Fong, Trevor
trevor.fong at ubc.ca
Thu Sep 5 19:22:06 EDT 2013
Hi Everyone,
We're running Shibboleth2 IdP 2.2.0 and are trying to integrate with MS ADFS 2.0 as an SP.
ADFS is reporting the following error:
Request type: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
Additional Data
Exception details:
Microsoft.IdentityServer.Service.SamlProtocol.SamlProtocolException:
MSIS1022: Cannot process SAML Response from ''.
Inner exception: ID4037: The key needed to verify the signature could not be resolved from the following security key identifier 'SecurityKeyIdentifier
(
IsReadOnly = False,
Count = 1,
Clause[0] =
Microsoft.IdentityServer.Tokens.MSISSecurityKeyIdentifierClause
)
'. Ensure that the SecurityTokenResolver is populated with the required key.
at
Microsoft.IdentityServer.Service.Tokens.SamlMessageSecurityTokenHandler.Rea
dToken(XmlReader reader)
at
System.IdentityModel.Tokens.SecurityTokenHandlerCollection.ReadToken(XmlRea
der reader)
at
System.IdentityModel.Tokens.SecurityTokenElement.ReadSecurityToken(XmlEleme
nt securityTokenXml, SecurityTokenHandlerCollection securityTokenHandlers)
at
Microsoft.IdentityServer.Service.SecurityTokenService.MSISSecurityTokenServ
ice.GetOnBehalfOfPrincipal(RequestSecurityToken request, ClaimsPrincipal
callerPrincipal)
at
Microsoft.IdentityServer.Service.SecurityTokenService.MSISSecurityTokenServ
ice.BeginGetScope(ClaimsPrincipal principal, RequestSecurityToken request, AsyncCallback callback, Object state)
at System.IdentityModel.SecurityTokenService.BeginIssue(ClaimsPrincipal
principal, RequestSecurityToken request, AsyncCallback callback, Object
state)
at
System.ServiceModel.Security.WSTrustServiceContract.DispatchRequestAsyncRes
ult..ctor(DispatchContext dispatchContext, AsyncCallback asyncCallback, Object asyncState)
at
System.ServiceModel.Security.WSTrustServiceContract.BeginDispatchRequest(Di
spatchContext dispatchContext, AsyncCallback asyncCallback, Object
asyncState)
at
System.ServiceModel.Security.WSTrustServiceContract.BeginProcessCore(Messag
e requestMessage, WSTrustRequestSerializer requestSerializer, WSTrustResponseSerializer responseSerializer, String requestAction, String responseAction, String trustNamespace, AsyncCallback callback, Object
state)
Would anyone know what the issue is?
Thanks,
Trevor Fong
More information about the users
mailing list