Signed AuthnRequest

[Vasu Y]

But IDP didn't process the AuthnRequest which could lead to it issuing Assertion.

What does it mean by "SAML message intended destination (required by binding) was not present"? What is not present in the AuthnRequest?


________________________________
 From: Peter Schober <peter.schober at univie.ac.at>
To: users at shibboleth.net 
Sent: Thursday, 20 March 2014 5:46 PM
Subject: Re: Signed AuthnRequest
 

* Vasu Y <vyal2k at yahoo.com> [2014-03-20 13:04]:

> My SP is sending a signed AuthnRequest, but at shibboleth IDP end,
> i see errors.
[...]
> Here is the error from idp-process.log:
> -------------------------------------
>  17:26:38.627 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:406] - Message did not meet security requirements
>  org.opensaml.xml.security.SecurityException: SAML message intended destination (required by binding) was not present
>  at org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder.checkEndpointURI(BaseSAMLMessageDecoder.java:201) ~[opensaml-2.6.0.jar:na]
>  at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:72) ~[opensaml-2.6.0.jar:na]
>  at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:386) [shibboleth-identityprovider-2.4.0.jar:na]
>  at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:211) [shibboleth-identityprovider-2.4.0.jar:na]
>  at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:189) [shibboleth-identityprovider-2.4.0.jar:na]
> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:90) [shibboleth-identityprovider-2.4.0.jar:na]

Note that there is no error above (WARN != ERROR).
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140320/1f9f4e0e/attachment.html