Integrating with SAML2 SP

[Sathish Anickode]

I do not see anything logged on the SP end and might need to turn on appropriate debugging. Thanks for your input.

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Alex Olson
Sent: Thursday, December 11, 2014 9:47 AM
To: Shib Users
Subject: Re: Integrating with SAML2 SP



Looking into the idp_process.log, I see the following:

09:31:25.673 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:599] - Signing assertion to relying party sp.local.com
09:31:25.695 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:331] - secondarily indexing user session by name identifier
09:31:25.695 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:796] - Encoding response to SAML request _0x6093c1a51bff748f4b3fe1572f199943 from relying party sp.local.com
09:31:25.700 - INFO [Shibboleth-Audit:1028] - 20141211T163125Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_0x6093c1a51bff748f4b3fe1572f199943|sp.local.com|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://idp.local.com/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_a556db09c0e6bd3e5eda0021e491be29|tuser|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|transientId,userLogin,|_d23c758a0fe2ef293760d7f52f18ed5f|_474bac62b5e96e90bab1c44f5c66d87d,|

Any ideas as to why this error is occurring?



It looks like, at least to me, that the IdP is fulfilling it’s end of the bargain. What do the SP logs show? Have you also configured your metadata correctly?

Just some thoughts.

— Alex K. Olson
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141211/0207f7bf/attachment.html