Google Apps with IdP v3 not working

[Cantor, Scott]

On 8/27/15, 9:19 AM, "users on behalf of Dave Perry" <users-bounces at shibboleth.net on behalf of Dave.Perry at hull-college.ac.uk> wrote:

>I dropped Dave's config into the files he said, and I now get this error (with successful login to AD):
>ERROR - Access Denied
>You are not eligible for the service requested.

That means it's not a registered user on their side, last I heard.

>2015-08-27 14:06:19,024 - INFO [Shibboleth-Audit.SSO:241] - 20150827T130619Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|gmdapadbcmamchajhbpkcjjamgiehnlhaekpemif|google.com|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://shibb.hull-college.ac.uk/idp/shibboleth|||70012521||g_principal||
>
>And idp-audit:
>20150827T130619Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|gmdapadbcmamchajhbpkcjjamgiehnlhaekpemif|google.com|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://shibb.hull-college.ac.uk/idp/shibboleth|||myusername||g_principal||

That doesn't make sense, they look like the same audit record, but with different data.

-- Scott