Error resolving principal name

[Cantor, Scott]

On 2/26/15, 1:28 PM, "Morris, Andi" <amorris at cardiffmet.ac.uk> wrote:



>Hi all,
>I’m getting the following error when users try to authenticate against a 
>particular SP. Can someone please point me in the right direction to 
>resolve this. I believe it might be because the SP is requesting a SAML1 
>transientID, but my IdP cannot resolve the attribute against the 
>principal name.

The SP isn't requesting an ID, that's an attribute query, probably, which 
is certainly common enough from a Shibboleth SP using SAML 1. The query 
subject isn't being mapped back into a user for the query.

-- Scott