Salesforce error when authing against Shibboleth

[Zico]

Ben,

I had same issue before and as far as I remember, we resolved it by
releasing transientID ( ** ) in this trust relationship.
Also, SAML2SSO Profile should be configured where "encryptAssertions"
should be "never".

You can try this.

( ** )
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverTransientIDAttributeDefinition
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTransientNameIdentifier


On Wed, Aug 6, 2014 at 2:20 PM, Ben Branch <BBranch at uco.edu> wrote:

>  All,
>
>
>
> I've spent most of my day today trying to configure Salesforce to use
> Shibboleth and I've ran into nothing but problems.
>
>
>
> Currently, when I use the SAML Validator I get this failure on Item #11:
>
>
>
> *11. Validating the Signature*
>
>   Is the response signed? false
>
>   Is the assertion signed? true
>
>   The reference in the assertion signature is valid
>
>   Is the correct certificate supplied in the keyinfo? true
>
>   Signature or certificate problems
>
>   The signature in the assertion is not valid
>
>
>
>
>
> I've double checked the certificate that I've uploaded and it matches what
> I have in my metadata file, and both of those match the .crt file I have on
> my server.  I've double checked the SP Metadata, and it is correct.  When I
> login I get this error:
>
>
>
> *Login Error*
> Your login attempt using single sign-on with an identity provider
> certificate has failed. Please contact your salesforce.com administrator
> for more information.
>
>
>
> Everything else in the SAML Validator checks out fine.  I am at a complete
> loss as to where I need to start looking on how to resolve this issue.  Any
> help would be greatly appreciated.
>
>
>
> Ben Branch
> UNIX/Linux Administrator
>
> University of Central Oklahoma
>
> ITIL Foundation v3, Network+, RHCSA
>
> 100 N. University Drive, Box 122
>
> Edmond, OK 73034
>
> D: 405.974.2649 | M: 405.550.6804 | *bbranch at uco. <bbranch at uco.>edu* |
> www.uco.edu
>
>
>
> "I am wiser than this man, for neither of us appears to know anything
> great and good; but he fancies he knows something, although he knows
> nothing; whereas I, as I do not know anything, so I do not fancy I do. In
> this trifling particular, then, I appear to be wiser than he, because I do
> not fancy I know what I do not know."  - Socrates
>
>
>  ***Bronze+Blue=Green*** The University of Central Oklahoma is Bronze,
> Blue, and Green! Please print this e-mail only if absolutely necessary!
>
> ***CONFIDENTIALITY*** -This e-mail (including any attachments) may
> contain confidential, proprietary and privileged information. Any
> unauthorized disclosure or use of this information is prohibited.
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140806/908def18/attachment-0001.html