Shibboleth IDP 3.2.1 integration with Citrix Netscaler SP
Muthuraman Sethuraman Sethuraman (US - Advisory)
muthuraman.sethuraman at pwc.com
Sat Jul 9 01:05:25 EDT 2016
Hi,
I have integrated Shibboleth IDP 3.2.1 integration with Citrix Netscaler SP.
And from the IDP side, authentication is happening successfully and also
releasing the following attributes to the SP.
uid,mail,sAMAccountName,userPrincipalName.
Accessing the Citrix protected page, its being redirected to the Shibboleth
IDP and also on entering the credentials, IDP successfully binds to the AD
and releases the SAML assertion.
And then i get the following error ...
*"Unsupported mechanisms found in Assertion; Please contact your
administrator."*
Can anyone in this forum, tell me, what's going wrong.
I have attached the SAML Authn Request coming from Netscaler and the SAML
Assertion and Response generated by Shibboleth IDP.
Thanks in Advance,
Muthu
--
*Muthuraman S*
PwC | SDC Manager | IdAM
Office: +1 404-838-4445 | Mobile: +91-9886302072
Email: muthuraman.sethuraman at pwc.com
PricewaterhouseCoopers LLP
EGL Business Park, Bengaluru, India
http://www.pwc.com/us
______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160709/9287b8e3/attachment-0001.html>
-------------- next part --------------
<?xml version="1.0" encoding="UTF-8"?>
<saml2:Assertion ID="_2f122d1fdf32417ef0ebdd93331b3851"
IssueInstant="2016-07-08T10:39:06.923Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
<saml2:Issuer>https://xxx.xx.xx.xx/idp/shibboleth</saml2:Issuer>
<saml2:Subject>
<saml2:NameID
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
NameQualifier="https://xxx.xx.xx.xx/idp/shibboleth" SPNameQualifier="netscaler.com">AAdzZWNyZXQxJeNwvamwZ2rWliAslRHudYS7LWzcIk2OYe5AcZtIx1GPZH+g7yIGJYr9T1ZbWcUduxQGsbKD+v/+ayi8cZsycTqaVTRkszf1dFxq2HQHm7MSIg==</saml2:NameID>
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml2:SubjectConfirmationData
Address="fe80:0:0:0:e932:6910:37b7:2da7%13"
InResponseTo="_eee30f1bd016c77833f932639953abd0"
NotOnOrAfter="2016-07-08T10:44:07.283Z" Recipient="https://xxx.xx.xx.xx/cgi/samlauth"/>
</saml2:SubjectConfirmation>
</saml2:Subject>
<saml2:Conditions NotBefore="2016-07-08T10:39:06.923Z" NotOnOrAfter="2016-07-08T10:44:06.923Z">
<saml2:AudienceRestriction>
<saml2:Audience>netscaler.com</saml2:Audience>
</saml2:AudienceRestriction>
</saml2:Conditions>
<saml2:AuthnStatement AuthnInstant="2016-07-08T10:38:59.673Z" SessionIndex="_d54bf52df00ea697ca350c6b00373607">
<saml2:SubjectLocality Address="fe80:0:0:0:e932:6910:37b7:2da7%13"/>
<saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="uid" Name="username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue>ssekar</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="mail" Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue>ssekar at example.org</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="uid" Name="sAMAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue>ssekar</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="uid" Name="userPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml2:AttributeValue>ssekar</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
</saml2:Assertion>
-------------- next part --------------
<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest
AssertionConsumerServiceURL="https://xxx.xx.xx.xx/cgi/samlauth"
Destination="https://xxx.xx.xx.xx/idp/profile/SAML2/POST/SSO"
ID="_6d801dac052b502a6aea54fb845458d0"
IssueInstant="2016-07-08T10:27:00Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">netscaler.com</saml:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_6d801dac052b502a6aea54fb845458d0">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>6qGJ/c/TKdB2ciXYMVRbU+2ASbY=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>IGjGgerRpUjZu2+Ltu3Vn1SqiY28lQ/SxYTWU034fzF7rKasqhz5Q1FWwpiqyYPoNF8ZRcJzQ11Pe99X9UA3vnP+daKl4SUZxOW8NziXWKADNP3MV9jAF0sLnxQInzbslLptH4xW6NEYn9GzHcjYc9h4IcKiTiry7Qw71pEy8asD6OaSPjI4Z79WNh6NQXEsW42O+tiCw/12+6AzlLthx7yoHPSpsGt3v7zKxISCWIs/KIRqX4aIIXCDJ993u96PFp8Be2lO5kQhHPViph+8DO/R+WpGrAexGJZwypMJukCY9R1YOmOkmxJGeNJCszqp5bH+9kA/Na/damw4ED151w==</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
</samlp:AuthnRequest>
-------------- next part --------------
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://xxx.xx.xx.xx/cgi/samlauth"
ID="_74c227cacd5cf0e2d439763c1df1df8f"
InResponseTo="_eee30f1bd016c77833f932639953abd0"
IssueInstant="2016-07-08T10:39:06.923Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol">
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://xxx.xx.xx.xx/idp/shibboleth</saml2:Issuer>
<ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference
URI="#_74c227cacd5cf0e2d439763c1df1df8f">
<ds:Transforms>
<ds:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>ejTBn4csXsPluAPRJTS/myd+Hg8/z12FgjlJIm1BrDv+7wTbYDCI8CKzX6LLsNyv7bi5oskoygBN
XQ9DTs9tnQ==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
h/Q5SLg6UvTbvWyZRhWFkiuXsNYNqdE56tk0K/UXinLNqaNrzrn21WTv6FjJi6QamKUSL2/Bu2bK
2VHShmmNzSbSZD3BZocqGHpdR47LrAPWQ0DHfIjPN5XP4sTii1IbkxfRCYxFIIp1u/lBRKlsATTN
+zkgqqhBSyEgxvbIDg8RGQlGGSlJtLm1c64as15aBTKVmOFv64ufkpEfHtBdKOIVjzlGHr8U6eyA
L7qHLzKZ9E0d4JWUPB3Sa4SD4PiTDPBDz6OUaQQUv5v2rOSMI9k0/8cI0KINBQwbiL9UlO8n6wfs
+A6TuDaYwdH4H4i670FTgPB4oc3YqP5Q3glLFw==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIDXTCCAkWgAwIBAgIVAOXbpEN+OQ3FpLYOEK+fBo9MBJbrMA0GCSqGSIb3DQEBCwUAMCYxJDAi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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<saml2p:Status>
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
</saml2p:Status>
<saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
<xenc:EncryptedData Id="_e9f4233156e9032f4400aca696947c49"
Type="http://www.w3.org/2001/04/xmlenc#Element" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:EncryptionMethod
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<xenc:EncryptedKey
Id="_e9229ead007e4645048efcadd7c51074"
Recipient="netscaler.com" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:EncryptionMethod
Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
<xenc11:MGF
Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1" xmlns:xenc11="http://www.w3.org/2009/xmlenc11#"/>
</xenc:EncryptionMethod>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIDojCCAooCCQDa5Oq2ziVWYzANBgkqhkiG9w0BAQUFADCBkjELMAkGA1UEBhMCVVMxETAPBgNV
BAgTCFZpcmdpbmlhMRAwDgYDVQQHEwdzdGVybGluMQwwCgYDVQQKEwNQd0MxEzARBgNVBAsTCmhl
YWx0aGNhcmUxETAPBgNVBAMTCHhkc2VydmVyMSgwJgYJKoZIhvcNAQkBFhlzbXJ1dGhpeWEudi5z
ZWthckBwd2MuY29tMB4XDTE2MDcwNzEwMzI0OVoXDTE5MDQwNDEwMzI0OVowgZIxCzAJBgNVBAYT
AlVTMREwDwYDVQQIEwhWaXJnaW5pYTEQMA4GA1UEBxMHc3RlcmxpbjEMMAoGA1UEChMDUHdDMRMw
EQYDVQQLEwpoZWFsdGhjYXJlMREwDwYDVQQDEwh4ZHNlcnZlcjEoMCYGCSqGSIb3DQEJARYZc21y
dXRoaXlhLnYuc2VrYXJAcHdjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANK9
obXq9Xoe3rBNOXk+f7MR9iAw0Xh/1yCYJp+IQ4yw2lvQMQ3wXxjz6UISy9Rj5rgotI76Re7GYVv8
6F+M8/jiBj4QnSnynnX6ySaD2xMZIXurRSPZTE62rBVfgC0xrtMhq7BntiAQVHFkoS/qvasGbeC2
wOlDWgDXF0L3Yh1xjyMfMxj811c7k7cPrzXq51hnjarR3DlH44TU5De3ONBUx4v5wHm5Oyv9Dhfc
UHJU3wwmzU1HmM8tw3EInB4dGtnEWhi5FHYtAihDTvWVEkwMqqoxPGqLghL2aEa7CiihkS5j5L4z
BiupEA4ntOLQ1iPUCH3PWgf+atA32n9Fn2MCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAUIXnlTQp
rhvhya0gYvQud38HPkfJjrwj7qz+EH7EBRBW8DEdDwXaHPbQIHOiaZto+iuFAF9B3nhBQ1I/YGep
wRK6L+nYDxhOWCm4lZx5xP2XM5l+vWn3Ut7vJT7eCPCd6ui/a/PgDWD4zLWgTg5AcVzn4KFDkVaG
VoAXtH7+7P5rqSjWzfMUVGBItVAcsVIhYXU4j8GIaLIq1l05IIpyNRg2XzcZsIJUByet/F2wi24T
rPxETGwqtUj1olyKS8EKa16fDZ+fsaFH4dbInIOr0VYpsERspD/vPNt+4sL0IBwvh+lHdZRFdFjV
N4F/zFroKxJF1mV86WNV2HH79ZQomg==</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:CipherValue>e+lZ5kjPSmdZWe06lpAouuk8uuKicQuqv403FomttBzSVtQeg/eFIkm4uqO63fuLo+gCOGV7SJEu
kLPGtapP8Sfkv5qmFDquW03Zt/MV+UWxj2UQe/Kk7DmLd6lHTLmUNZeCZ0SNn5dLIb8rqCQZeQ8d
57zKJ/LKxvRic9z3HbcqgNKl3kiADYoL5D/EBu5O3Fx/h5wCBpWibXSIWAM+kSmU/tMAYo7BA7OE
WY6b3XP5zF1D6eMw2KJUl9yYMq5+wSteZbvlsT7EoQNH3IQUoEQOsmv0PtIA5bhmW727GK9t9F+k
8j3x8pJeMvoqsDWDxi7WNvZq7FkSSga1g9X2AQ==</xenc:CipherValue>
</xenc:CipherData>
</xenc:EncryptedKey>
</ds:KeyInfo>
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:CipherValue>YKbmSFFeZ7u2tUAVpkRO+DG9An2tF9465pl8eJFDLvfXWq3bkivyJsK3/hw7YbdObBuvWWAySlS7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</xenc:CipherValue>
</xenc:CipherData>
</xenc:EncryptedData>
</saml2:EncryptedAssertion>
</saml2p:Response>
More information about the users
mailing list