Troubleshooting the "Unable to decode" (IdP 3.3)

[Cantor, Scott]

> I finally was able to run a request from our httpd-access logs for a request
> where IdP erroring on the decoding.  I would really appreciate if someone
> could take a look at the error and the SAMLRequest parameter, decoded
> from the HTTPRequest that caused the error.  Is it the HTTPRequest that the
> inflater is calling “invalid”, or the SAMLRequest portion

Neither. You are not correlating the errors to the right requests, you can't be.

> The SAMLRequest parameter value from the above HTTPRequest which
> caused the above error.  This was decoded using the http://rnd.feide.no/
> SAML2 debugger tool:

That means it could not have caused that ZIP exception. Thus my conclusion.

-- Scott