Error while generating NameID for Office365

[Klingenstein, Nate]

Pedro,


Your actual error is here:


2017-04-17 14:43:41,896 - DEBUG
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:396] - Profile
Action AddNameIDToSubjects: Trying to generate NameID with Format
urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
2017-04-17 14:43:41,899 - ERROR
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:404] - Profile
Action AddNameIDToSubjects: Error while generating NameID
org.opensaml.saml.common.SAMLException: Invalid
NameIdentifierGenerationService configuration
        at
net.shibboleth.idp.saml.nameid.impl.ProxySAML2NameIDGenerator.generate(ProxySAML2NameIDGenerator.java:62)
2017-04-17 14:43:41,899 - WARN
[org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:337] - Profile
Action AddNameIDToSubjects: Request specified use of an unsupportable
identifier format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
2017-04-17 14:43:41,900 - WARN
[org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred
while processing the request: InvalidNameIDPolicy

Something in your configuration can't be parsed.  I don't see anything obviously wrong in the small piece that you sent, but if you look for parsing errors on initialization of that service, it should give you more information.  We'll be able to help more with that.

The good news is that it looks like everything else is in place for this to work once you have that configuration fixed.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170417/5e3da92a/attachment.html>