No subject

Eric Wedaa Eric.Wedaa at marist.edu
Tue Nov 10 10:48:50 EST 2015


All

  I'm trying to get IDP 2.4.0 to talk with Cisco Webex.  I'm now getting an error 31, Auto account Creation failed.

  I checke with fiddler to look at the attributes I'm sending, and I'm sending the right ones, in (mostly, see below) the right format.  (My fiddler output is at 
http://pastebin.ca/3246392 ).

  I was able to get a fiddler output from a different college that is also running 2.4.0 and "diffed" my fiddler and his fiddler output.  Once I figured out how to prettyprint my fiddler output I found two "significant" differences.

1c1
< OTHER_COLLEGE Fiddler output
---
> MARIST fiddler output


-----------------------------------------------------------------------------------------------
These two lines are different
30,31c30,31
<     <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"  ID="_9a90b3b2d3697d47466b8f37474c60ce"  IssueInstant="2015-11-06T19:55:59.906Z" Version="2.0">
>     <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"  xmlns:xs="http://www.w3.org/2001/XMLSchema"  ID="_db1a873b588da6d5d3fa6ad83e5e2f46"  IssueInstant="2015-11-09T22:13:19.463Z" Version="2.0">


And possibly more importantly ....

-----------------------------------------------------------------------------------------------
These two lines are different
55c55
<           <saml2:NameID  Format="urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified"  NameQualifier="https://shibboleth.othercollege.edu/idp/shibboleth">dswartz</saml2:NameID>
---
>           <saml2:NameID  Format="urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified"  NameQualifier="https://idp.it.marist.edu:8443/idp/shibboleth"  SPNameQualifier="https://facstaff-marist.webex.com">KDY4Q</saml2:NameID>


Any idea where:

   SPNameQualifier="https://facstaff-marist.webex.com"

is  coming from? Is this even a problem? (There are other, "minor" differences in the fiddler output, but this is what looks significant to me).  I'm not having luck googling it today.


Thanks!

>>>>>>>Ericw


More information about the users mailing list