Nate Klingenstein ndk at
Mon May 30 15:59:15 EDT 2016


That usually means the request had no AuthnRequest sent with the login initiation.

It may have never existed. It may have been eaten by an intermediate "secure" box.  You might be replaying a half-broken request.

We can't tell you what is "supposed to" be there. It just needs to match your environment and be there.  Something like SAML Tracer for FireFox or Chrome may help.

Take care,

Semt frim mt iPone

> On May 30, 2016, at 01:53, Muthuraman Sethuraman Sethuraman (US - Advisory) <muthuraman.sethuraman at> wrote:
> I am using shibboleth IDP 3.2.1 and while accessing the SP, i get the challenge page and on providing the credentials, i see this following response
> Web Login Service - Stale Request
> And in the isp-process.log
> -------------
> 2016-05-30 14:15:39,981 - INFO [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:193] - RemoteUserAuthServlet will process REMOTE_USER, along with attributes [] and headers []
> 2016-05-30 14:16:24,796 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request
> org.opensaml.messaging.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message
>         at org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder.doDecode(
> 2016-05-30 14:16:24,804 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: UnableToDecode
> -------------
> -- 
> Muthuraman S
> PwC | SDC Manager | IdAM
> Office: +1 404-838-4445 | Mobile: +91-9886302072
> Email: muthuraman.sethuraman at
> PricewaterhouseCoopers LLP
> EGL Business Park, Bengaluru, India
> The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list