docusign failing

[Ted Fisher]

Thanks for the response Scott.

>Then the IdP isn't getting any user identity from the CAS client.

I'm not seeing it redirect to CAS.   On the first session that worked I see these in logs:
      15:41:39.119 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:240] - Redirecting user to authentication engine at https://webapp.bgsu.edu:443/idp/AuthnEngine
      ...
      15:41:39.273 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler:66] - Redirecting to https://webapp.bgsu.edu:443/idp/Authn/RemoteUser

RemoteUser redirects to CAS.
But, on the failed attempt it never transfers to RemoteUser.  Instead after it transfers to authentication engine it just logs this:
      [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:178] - Incoming request contains a login context and indicates there was an error authenticating the principal, processing second leg of request

Ted

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160510/0fd6a551/attachment.html>