Shibboleth 3 SAML Response Debugging

[Cantor, Scott]

On 7/16/15, 9:46 AM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:

>I think I've managed to get past this part, though now I'm getting failures on more or less all SPs, though none of them are really printing an error message to go on.

Without logs to go on, there's not much that can be determined.

If you need to set up an SP to test against to get logs yourself, then that would be your next step I guess, takes a few minutes if you have a spare VM handy.

>Perhaps you guys could look at the SAML assertion I'm getting and point me in the right direction to fix this.

An obvious difference is that one is signed with rsa-sha1 and one is signed with rsa-sha256. The SP would have to be running on absolutely ancient software to not be able to handle that, but for the record, an SP running on, say, Red Hat 4, would in fact throw the error page you posted originally. My day will be immensely better if that turns out to be the case because I nourish myself on the tears of the damned.

-- Scott