What alias? (Spring SAML Extension to ADFS: Artifact binding: Certificate import)

[Mick Francis]

Hi,

I'm trying to use the spring-security-saml2-sample webapp, in Tomcat, with ADFS as IdP. ADFS uses Artifact binding, so I need to import its certificate into the samlKeystore.jks keystore. The documentation says to use:

    keytool -importcert -alias domaina.public -file domaina.public.cer -keystore samlKeystore.jks

    (I used the SSLExtractor utility to extract the key into file domaina.public.cer)

and this succeeds, but things still don't work. I have used an arbitrary alias "domaina.public" does this have to get referenced somewhere?

The error I get is:

        [cid:image003.jpg at 01CF1C4B.130C6CA0]
If I change ADFS to use POST, I get a different error:

        [cid:image004.jpg at 01CF1C4B.130C6CA0]

Very grateful for any help,

Mick Francis
Senior Software Engineer

office:      +44 (0)845 838 4646
direct:      +44 (0)1344 350427
mobile:   +44 (0)7981 027106
fax:           +44 (0)1344 457550
e-mail:    mick.francis at lightfootsolutions.com <mailto:first.last at lightfootsolutions.com>
web:         www.lightfootsolutions.com<http://www.lightfootsolutions.com/>

Lightfoot and signalsfromnoise(r)(sfn) - A powerful approach to performance improvement

Lightfoot Solutions UK Limited
Richmond House
Oldbury
Bracknell
Berkshire
RG12 8TQ

Important Notice
This e-mail is confidential, may be legally privileged, and is for the intended recipient only. Access, disclosure, copying, distribution or reliance on any of it by anyone else is prohibited and may be a criminal offence. Please delete or destroy all copies immediately if obtained in error and e-mail confirmation to the sender. Thank you.

Lightfoot Solutions UK Limited. Registered Office: Richmond House, Oldbury, Bracknell, Berkshire, RG12 8TQ. Registered in England and Wales No. 06988557

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140128/c8dad31d/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 22013 bytes
Desc: image003.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20140128/c8dad31d/attachment-0002.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 17669 bytes
Desc: image004.jpg
Url : http://shibboleth.net/pipermail/users/attachments/20140128/c8dad31d/attachment-0003.jpg