Box.com and Shibboleth

[Rob Gorrell]

Is your filter matching the Box SP? The AttributeRequesterString value we
match against is "box.net" but you have "https://services.box.com/sp".

Looking at your audit trace...
016-02-29 08:40:02,513 - INFO [Shibboleth-Audit.SSO:241] -
20160229T144002Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|aTaVxkNsrMagR4Tsw3dkh5l-TGR
|*box.net <http://box.net>*|
http://shibboleth.net/ns/profiles/saml2/sso/browser|https://logintest.noctrl.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_f3849b289760d44449f9bfe62d6f459e|casutton|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||AAdzZWNyZXQxxxKquNVPpR5LnofTIk0ea6li7WEdmUEbq73t1trVyy0qmhwrpQqqRs93c3KvN2CKOCYhfPgpkI+m6tk9A3s0lgwRsyjjyWfzgPj5TKvI|_12beaf680eaf737d7b4d9ef639e27a4f|
<http://shibboleth.net/ns/profiles/saml2/sso/browser%7Chttps://logintest.noctrl.edu/idp/shibboleth%7Curn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST%7C_f3849b289760d44449f9bfe62d6f459e%7Ccasutton%7Curn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport%7C%7CAAdzZWNyZXQxxxKquNVPpR5LnofTIk0ea6li7WEdmUEbq73t1trVyy0qmhwrpQqqRs93c3KvN2CKOCYhfPgpkI+m6tk9A3s0lgwRsyjjyWfzgPj5TKvI%7C_12beaf680eaf737d7b4d9ef639e27a4f%7C>


-Rob

On Mon, Feb 29, 2016 at 11:21 AM, Rod Widdowson <rdw at steadingsoftware.com>
wrote:

> > 2016-02-29 08:40:00,327 - ERROR
> > [net.shibboleth.idp.profile.impl.ResolveAttributes:240] - Profile Action
> > ResolveAttributes: Error resolving attributes: Invalid Attribute
> > resolver configuration
>
> > I'm assuming that this is a problem with my attribute-filter.xml file?
>
> No, with your attribute-resolver file.
>
> Look earlier in the log (like when tomcat starts) and you'll get more info.
>
> Rod
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Robert W. Gorrell
Systems Architect, Identity and Access Management
University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160229/cabeb835/attachment.html>