fluidreview?

[Liam Hoekenga]

On Mon, Oct 19, 2015 at 5:19 PM, Mailvaganam, Hari <hari.mailvaganam at ubc.ca>
wrote:

> We do - but we are on IdP2 (in process of migrating to IdP3).
>
> What issues are you experiencing?
>

We can't log in, and I'm trying to figure out what I'm missing.  Their
error message is unhelpful ("Ooops!  There were problems trying to
authenticate the user.")

Our instances are using ePTID (seemingly as an attribute) for the unique
identifier.  So, we had to define ePTID again.

It was using the default settings for our v2 IdP when it comes to signing
and encryption...
    signResponses="never"
    signAssertions="always"
    encryptAssertions="conditional"
    encryptNameIds="never

...which we've replicated

    p:signResponses="false"
    p:signAssertions="true"
    p:encryptAssertions-ref="EncryptNoConfidentiality"
    p:encryptNameIDs="false"

(We also tried 'p:encryptAssertions="false"')

It's requesting a transient name ID in the authn request... but it seems to
have been doing that with the v2 IdP, and we didn't suppress the release of
transientId there.

We're trying to reach out to the vendor now, but I'd welcome suggestions.

thanks
Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151020/df7fc974/attachment.html>