Missing authn request signature

Paolo Smiraglia paolo.smiraglia at gmail.com
Tue Jun 12 07:45:26 EDT 2018


On Tue, 12 Jun 2018 at 12:30, Peter Schober <peter.schober at univie.ac.at> wrote:
> [...]
>
> First you should ascertain that the software is loading the key pair.
> If it's not that's your answer why it's not signing.

I verified and the keypair is correctly loaded. I put the logs in
debug mode but (IMHO) nothing relevant is shown.

This is the generated AuthnRequest

<samlp:AuthnRequest AssertionConsumerServiceURL="https://****/iam/SAML2/POST"
    AttributeConsumingServiceIndex="1"
Destination="https://idp.spid.gov.it/samlsso" ForceAuthn="true"
    ID="_f2f42b466c65bc2edf80cb4da21266a7" IssueInstant="2018-06-12T11:41:29Z"
    ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
    <saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
        NameQualifier="****">
        ****
    </saml:Issuer>
    <samlp:NameIDPolicy AllowCreate="1"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>
    <samlp:RequestedAuthnContext Comparison="exact">
        <saml:AuthnContextClassRef>https://www.spid.gov.it/SpidL1</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>
</samlp:AuthnRequest>

-- 
PAOLO SMIRAGLIA


More information about the users mailing list