SAML rocket.chat and testshib.org
Marcus Schopen
lists at localguru.de
Fri Mar 10 13:55:16 EST 2017
Hi,
I'm testing rocket.chat SAML with testshib.org as IDP, but get an error:
"Error: Unable to validate response url: Error: Missing SAML assertion".
I've installed SAML trace in firefox and see "Required NameID format not
supported" in the response:
---------
<saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
Destination="https://rocketchat.mydomain.de/_saml/validate/schoppa-rocketchat"
ID="_380b406d897bd81d3fa427e13a57e533"
InResponseTo="nYueQyCkWdwmMffdK"
IssueInstant="2017-03-10T18:11:32.418Z"
Version="2.0"
>
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
>https://idp.testshib.org/idp/shibboleth</saml2:Issuer>
<saml2p:Status>
<saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Responder">
<saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy" />
</saml2p:StatusCode>
<saml2p:StatusMessage>Required NameID format not
supported</saml2p:StatusMessage>
</saml2p:Status>
</saml2p:Response>
---------
The ID of the AuthnRequest "nYueQyCkWdwmMffdK" in the response is
correct. Any help is welcome.
Ciao
Marcus
More information about the users
mailing list