Not able to log on to Webex

Tue Jan 19 16:04:13 EST 2016

Dude, common problem.  Send me your email address and I'll send you the config files I have that work for WebEx.  We went through heck to get that to work.  

>>Ericw
eric.wedaa at marist.edu

-----"users" <users-bounces at shibboleth.net> wrote: -----
To: users at shibboleth.net
From: An H Nguyen 
Sent by: "users" 
Date: 01/19/2016 02:43PM
Subject: Not able to log on to Webex

My IDP v3 is able to authenticate with AD but I have this error with Webex SAML2 authentication:

SAML2AuthService?
User Authentication Failed
Reason:  SSO protocol error (1)

From idp-process.log:
=========================

2016-01-19 11:25:25,399 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute WebExLastName as a SAML 2 Attribute
2016-01-19 11:25:25,399 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187] - Profile Action AddAttributeStatementToAssertion: Encoding attribute WebExLastName as a SAML 2 Attribute
2016-01-19 11:25:25,399 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154] - Beginning to encode attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] - Encoding value Nguyen of attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191] - Completed encoding 1 values for attribute WebExLastName
2016-01-19 11:25:25,400 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute WebExEmail as a SAML 2 Attribute
2016-01-19 11:25:25,400 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187] - Profile Action AddAttributeStatementToAssertion: Encoding attribute WebExEmail as a SAML 2 Attribute
2016-01-19 11:25:25,400 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154] - Beginning to encode attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] - Encoding value an.h.nguyen at gtest.sjsu.edu of attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191] - Completed encoding 1 values for attribute WebExEmail
2016-01-19 11:25:25,401 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute emailNameID as a SAML 2 Attribute
2016-01-19 11:25:25,401 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:201] - Profile Action AddAttributeStatementToAssertion: Attribute emailNameID did not have a usable SAML 2 Attribute encoder associated with it, nothing to do
2016-01-19 11:25:25,402 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175] - Profile Action AddAttributeStatementToAssertion: Attempting to encode attribute WebExFirstName as a SAML 2 Attribute
2016-01-19 11:25:25,402 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187] - Profile Action AddAttributeStatementToAssertion: Encoding attribute WebExFirstName as a SAML 2 Attribute
2016-01-19 11:25:25,402 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154] - Beginning to encode attribute WebExFirstName
2016-01-19 11:25:25,402 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] - Encoding value An of attribute WebExFirstName
2016-01-19 11:25:25,403 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191] - Completed encoding 1 values for attribute WebExFirstName
2016-01-19 11:25:25,403 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:117] - Profile Action AddAttributeStatementToAssertion: Adding constructed AttributeStatement to Assertion _99bfa4fbcd3303a85ad3a446ff9e6bc7
2016-01-19 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100] - Configuration specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
2016-01-19 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:121] - Filtered non-metadata-supported formats from configured formats, leaving: [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
2016-01-19 11:25:25,405 - DEBUG [net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:151] - Unable to obtain name identifier from legacy attribute encoders
2016-01-19 11:25:25,408 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'f' not included in audit format
2016-01-19 11:25:25,408 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'd' not included in audit format
2016-01-19 11:25:25,408 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 't' not included in audit format
2016-01-19 11:25:25,408 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'ac'
2016-01-19 11:25:25,409 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile Action PopulateAuditContext: Adding 1 value(s) for field 'i'
2016-01-19 11:25:25,409 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'x' not included in audit format
2016-01-19 11:25:25,424 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'II' not included in audit format
2016-01-19 11:25:25,424 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'SS' not included in audit format
2016-01-19 11:25:25,425 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'u'
2016-01-19 11:25:25,425 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 's' not included in audit format
2016-01-19 11:25:25,425 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'S' not included in audit format
2016-01-19 11:25:25,425 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'DD' not included in audit format
2016-01-19 11:25:25,426 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile Action PopulateAuditContext: Adding 6 value(s) for field 'attr'
2016-01-19 11:25:25,426 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 'SM' not included in audit format
2016-01-19 11:25:25,426 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'bb'
2016-01-19 11:25:25,426 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'III'
2016-01-19 11:25:25,428 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:159] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.messaging.handler.impl.BasicMessageHandlerChain' on OUTBOUND message context
2016-01-19 11:25:25,429 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.ResponseImpl'
2016-01-19 11:25:25,441 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:100] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST

-- 
Thanks,
- - - - - - - - - - - -
An H. Nguyen
SJSU Computing Systems Analyst

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net