Signed AuthnRequest
Peter Schober
peter.schober at univie.ac.at
Thu Mar 20 08:16:56 EDT 2014
* Vasu Y <vyal2k at yahoo.com> [2014-03-20 13:04]:
> My SP is sending a signed AuthnRequest, but at shibboleth IDP end,
> i see errors.
[...]
> Here is the error from idp-process.log:
> -------------------------------------
> 17:26:38.627 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:406] - Message did not meet security requirements
> org.opensaml.xml.security.SecurityException: SAML message intended destination (required by binding) was not present
> at org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder.checkEndpointURI(BaseSAMLMessageDecoder.java:201) ~[opensaml-2.6.0.jar:na]
> at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:72) ~[opensaml-2.6.0.jar:na]
> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:386) [shibboleth-identityprovider-2.4.0.jar:na]
> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:211) [shibboleth-identityprovider-2.4.0.jar:na]
> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:189) [shibboleth-identityprovider-2.4.0.jar:na]
> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:90) [shibboleth-identityprovider-2.4.0.jar:na]
Note that there is no error above (WARN != ERROR).
-peter
More information about the users
mailing list