SAML rocket.chat and testshib.org

Marcus Schopen lists at localguru.de
Fri Mar 10 13:55:16 EST 2017


Hi,

I'm testing rocket.chat SAML with testshib.org as IDP, but get an error:
"Error: Unable to validate response url: Error: Missing SAML assertion".

I've installed SAML trace in firefox and see "Required NameID format not
supported" in the response:

---------
<saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"

Destination="https://rocketchat.mydomain.de/_saml/validate/schoppa-rocketchat"
                 ID="_380b406d897bd81d3fa427e13a57e533"
                 InResponseTo="nYueQyCkWdwmMffdK"
                 IssueInstant="2017-03-10T18:11:32.418Z"
                 Version="2.0"
                 >
    <saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"

Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"

>https://idp.testshib.org/idp/shibboleth</saml2:Issuer>
    <saml2p:Status>
        <saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Responder">
            <saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy" />
        </saml2p:StatusCode>
        <saml2p:StatusMessage>Required NameID format not
supported</saml2p:StatusMessage>
    </saml2p:Status>
</saml2p:Response>
---------

The ID of the AuthnRequest "nYueQyCkWdwmMffdK" in the response is
correct. Any help is welcome.

Ciao
Marcus




More information about the users mailing list