Shibboleth setup

[Klingenstein, Nate]

Jennifer,

The SP thinks the IdP's using the wrong key.  That could be because the IdP actually is using the wrong key, the IdP's metadata as loaded by the SP contains the wrong key, or because the IdP is identifying itself using the wrong name.

You'll want to compare the key you're using in each spot and your IdP's name.

Hope this helps,
Nate.

On Dec 21, 2016, at 5:32 AM, Fenstermaker, Jennifer <jfenstermaker at pennstatehealth.psu.edu<mailto:jfenstermaker at pennstatehealth.psu.edu>> wrote:

Our tech team is trying to integrate Shib with one of vendor software packages and we having issues.  Our tech team and vendor both have much success with Shib on MicroSoft servers but limited experience with Unix.

The vendor has supplied us with the alternate url that connects the user to the SSO screen.   After entering the user id and password an error is returned.  See below.     Can anyone shed any light on this issue?   Should we be looking towards the vendor or server side for this type of error?


opensaml::FatalProfileException

The system encountered an error at Thu Dec 1 14:20:16 2016

To report this problem, please contact the site administrator at root at localhost<mailto:root at localhost>.

Please include the following message in any email:

opensaml::FatalProfileException at (https://oasis.hersheymed.net/Shibboleth.sso/SAML2/POST)

Message was signed, but signature could not be verified.






Regards,
Jennifer
Jennifer Fenstermaker
Senior Systems Analyst - Educational Computing
Penn State Hershey Medical Center | Penn State College of Medicine
717.531.0003 x285136 | jfenstermaker at hmc.psu.edu<mailto:jfenstermaker at hmc.psu.edu>

E-Mail Confidentiality Notice – This message (including any attachments) contains information intended for a specific individual(s) and purpose which may be privileged, confidential or otherwise protected from disclosure pursuant to applicable law. Any inappropriate use, distribution or copying of the message is strictly prohibited and may subject you to criminal or civil penalty.  If you have received this transmission in error, please reply to the sender indicating this error and delete the transmission from your system immediately.

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161221/4a85412a/attachment-0001.html>