Not able to log on to Webex

[An H Nguyen]

My IDP v3 is able to authenticate with AD but I have this error with Webex
SAML2 authentication:

SAML2AuthService?
*User Authentication Failed*
*Reason:  *SSO protocol error (1)


>From idp-process.log:
=========================

2016-01-19 11:25:25,399 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
- Profile Action AddAttributeStatementToAssertion: Attempting to encode
attribute WebExLastName as a SAML 2 Attribute
2016-01-19 11:25:25,399 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
- Profile Action AddAttributeStatementToAssertion: Encoding attribute
WebExLastName as a SAML 2 Attribute
2016-01-19 11:25:25,399 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
- Beginning to encode attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
Encoding value Nguyen of attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
- Completed encoding 1 values for attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
- Profile Action AddAttributeStatementToAssertion: Attempting to encode
attribute WebExEmail as a SAML 2 Attribute
2016-01-19 11:25:25,400 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
- Profile Action AddAttributeStatementToAssertion: Encoding attribute
WebExEmail as a SAML 2 Attribute
2016-01-19 11:25:25,400 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
- Beginning to encode attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
Encoding value an.h.nguyen at gtest.sjsu.edu of attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
- Completed encoding 1 values for attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
- Profile Action AddAttributeStatementToAssertion: Attempting to encode
attribute emailNameID as a SAML 2 Attribute
2016-01-19 11:25:25,401 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:201]
- Profile Action AddAttributeStatementToAssertion: Attribute emailNameID
did not have a usable SAML 2 Attribute encoder associated with it, nothing
to do
2016-01-19 11:25:25,402 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
- Profile Action AddAttributeStatementToAssertion: Attempting to encode
attribute WebExFirstName as a SAML 2 Attribute
2016-01-19 11:25:25,402 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
- Profile Action AddAttributeStatementToAssertion: Encoding attribute
WebExFirstName as a SAML 2 Attribute
2016-01-19 11:25:25,402 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
- Beginning to encode attribute WebExFirstName
2016-01-19 11:25:25,402 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
Encoding value An of attribute WebExFirstName
2016-01-19 11:25:25,403 - DEBUG
[net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
- Completed encoding 1 values for attribute WebExFirstName
2016-01-19 11:25:25,403 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:117]
- Profile Action AddAttributeStatementToAssertion: Adding constructed
AttributeStatement to Assertion _99bfa4fbcd3303a85ad3a446ff9e6bc7
2016-01-19 11:25:25,405 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100]
- Configuration specifies the following formats:
[urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
2016-01-19 11:25:25,405 - DEBUG
[net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:121]
- Filtered non-metadata-supported formats from configured formats, leaving:
[urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
2016-01-19 11:25:25,405 - DEBUG
[net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:151] -
Unable to obtain name identifier from legacy attribute encoders
2016-01-19 11:25:25,408 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'f' not included in audit format
2016-01-19 11:25:25,408 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'd' not included in audit format
2016-01-19 11:25:25,408 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 't' not included in audit format
2016-01-19 11:25:25,408 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
Action PopulateAuditContext: Adding 1 value for field 'ac'
2016-01-19 11:25:25,409 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile
Action PopulateAuditContext: Adding 1 value(s) for field 'i'
2016-01-19 11:25:25,409 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'x' not included in audit format
2016-01-19 11:25:25,424 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'II' not included in audit
format
2016-01-19 11:25:25,424 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'SS' not included in audit
format
2016-01-19 11:25:25,425 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
Action PopulateAuditContext: Adding 1 value for field 'u'
2016-01-19 11:25:25,425 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 's' not included in audit format
2016-01-19 11:25:25,425 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'S' not included in audit format
2016-01-19 11:25:25,425 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'DD' not included in audit
format
2016-01-19 11:25:25,426 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile
Action PopulateAuditContext: Adding 6 value(s) for field 'attr'
2016-01-19 11:25:25,426 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
Action PopulateAuditContext: Skipping field 'SM' not included in audit
format
2016-01-19 11:25:25,426 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
Action PopulateAuditContext: Adding 1 value for field 'bb'
2016-01-19 11:25:25,426 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
Action PopulateAuditContext: Adding 1 value for field 'III'
2016-01-19 11:25:25,428 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:159] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type 'org.opensaml.messaging.handler.impl.BasicMessageHandlerChain' on
OUTBOUND message context
2016-01-19 11:25:25,429 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.ResponseImpl'
2016-01-19 11:25:25,441 - DEBUG
[net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:100]
- Looking up message encoder based on binding URI:
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST



-- 
Thanks,
- - - - - - - - - - - -
An H. Nguyen
SJSU Computing Systems Analyst
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160119/bfd66954/attachment-0001.html>