Integrating with SAML2 SP

[Sathish Anickode]

I am trying to integrate with a SAML2 SP running  in Weblogic on my local machine at the following endpoint: http://sp.local.com:7001. I initially got the following exception and turned off encryption for SAM2SSOProfile:

org.opensaml.xml.security.SecurityException: Could not resolve key encryption credential

After updating the encryption, I still get a 403: Forbidden error at http://sp.local.com:7001/saml2/sp/acs/post

Looking into the idp_process.log, I see the following:

09:31:25.673 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:599] - Signing assertion to relying party sp.local.com
09:31:25.695 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:331] - secondarily indexing user session by name identifier
09:31:25.695 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:796] - Encoding response to SAML request _0x6093c1a51bff748f4b3fe1572f199943 from relying party sp.local.com
09:31:25.700 - INFO [Shibboleth-Audit:1028] - 20141211T163125Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_0x6093c1a51bff748f4b3fe1572f199943|sp.local.com|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://idp.local.com/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_a556db09c0e6bd3e5eda0021e491be29|tuser|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|transientId,userLogin,|_d23c758a0fe2ef293760d7f52f18ed5f|_474bac62b5e96e90bab1c44f5c66d87d,|

Any ideas as to why this error is occurring?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141211/2b3cfb35/attachment.html