IDP v3.2.1 SLO issue

[Didier Capdevielle]

(Sorry, i try again because my last message was rejected by the mailing list)

Hi,
(Sorry to open again this thread)
I'm faced the same problem when using SLO (with redirect to IdP) :

"2016-09-30 09:50:30,312 - WARN
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:182] - Profile
Action WebFlowMessageHandlerAdaptor: Exception handling message
org.opensaml.messaging.handler.MessageHandlerException: Message context was
not authenticated
        at
org.opensaml.messaging.handler.impl.CheckMandatoryAuthentication.doInvoke(CheckMandatoryAuthentication.java:70)
2016-09-30 09:50:30,322 - WARN
[org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred
while processing the request: MessageAuthenticationError"
With MessageAuthenticationError = security-msg ans security-msg is something
like "Message Security Error"

Your conclusion is : "Enabling logout response signing on SP fixed it"

Why enabling logout response signing on SP ? Is it possible with shibd < 2.5
?

On IdP side (v3.2.1), turning idp.logout.authenticated to false give another
error : "unable to respond".

I search for a (very) long time.
Please, could you tell me what i do wrong.
TIA

Regards 



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/IDP-v3-2-1-SLO-issue-tp7623413p7629260.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.