Unable to make Shib Attribute Query

[Chauhan, Somya (ELS-CON)]

Hi All,

I have a query while making a shib  attribute query request from SP I am passing the public key generated by us and shared with IdP and the signed certificate provided by IdP.
I am passing the following request:

RequestURI:
https://xxxxxx.net/idp/a.ssaml2

Request Body:


<?xml version="1.0" encoding="UTF-8"?>

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">

<soapenv:Header>

</soapenv:Header>

<soapenv:Body>

<samlp:AttributeQuery ID="MhSkwDw1t1VbsLbHwI08AQZ" Version="2.0"

IssueInstant="2017-04-20T18:46:30Z"

Destination="https://xxxxx.net/idp/a.ssaml2"

xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"

xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">

  <saml:Issuer>https://yyyyyyy.com/</saml:Issuer<https://yyyyyyy.com/%3c/saml:Issuer>>

  <saml:Subject>

    <saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">MhSkwDt1VwI08pdd3AQZ</saml:NameID>

  </saml:Subject>

  <saml:Attribute Name="isValid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>



</samlp:AttributeQuery>

</soapenv:Body>

</soapenv:Envelope>

The Issuer is SP Entity ID.
I am getting the response as :

401 - "Cert auth credentials must be provided for (SP) ::: https://yyyyyy.com/"

Do I need to provide some credentials, if yes , then which credentials SP/IDP? Or I am doing something wrong ? Or is there any configuration missing which can cause such error.

Thanks,
Somya







-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170607/f4bcd096/attachment-0001.html>