I am trying to set up Dropbox in our IdP (v2.4.5) and every time i start up tomcat, I get the below errors so IdP does not finish starting up. What causes this? 20:21:16.617 - DEBUG [edu.internet2.middleware.shibboleth.common.config.security.Shibbol

[Peter Schober]

* bleb1982 <btl at fischerinternational.com> [2016-03-04 14:17]:
> Thanks Peter - The subject line/message was a copy past error. I had actually
> created a different thread which if you looked down a little it would show
> up. I thought I had deleted this one but then it looks like it got moved
> over to this thread by Scott.

Sorry, I no nothing about other threads or how you would "delete" one:
This is a mailing list sending out emails to subscribers, no matter
how else those posts are being exposed/republished/archived.

> I know that DropBox is part of InCommon but is a separate Entity ID,
> so I don't think that would have anything to do with it.

Seperate entityID from what? You mean this specific deployment makes
use of a Dropbox instance where the SAML RP has a different entityID,
i.e., different from "https://dropbox.com/sp" (Dropbox, according to
InC metadata)?

> #1 - added in /opt/shibboleth-idp/conf/relying-party.xml:

So this is for an old IDPv2?

>     <rp:RelyingParty id="Dropbox"
>                 provider="https://idp.company.net/idp/shibboleth"
>                 defaultSigningCredentialRef="IdPCredential">
>                 <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
> encryptAssertions="never" encryptNameIds="never" />
>     </rp:RelyingParty>

OK, so "Dropbox" is the entityID of the SAML SP in question (or the SP
will respond to any made-up entityID)?

And JFYI, encryptNameIds default to never for many, many years now, so this
does not need to be overridden, only encryptAssertions.

Either way, nothing you posted would explain that error, the override
above looks OK to me and is the only thing with an id="Dropbox".
I don't know the internals but "RelyingPartyFactoryBean does not
support circular references" sounds like there must be something else
with an id of "Dropbox"?
-peter