Problem generating AuthnRequest with SP 3
marangiom
m.marangio at innova.puglia.it
Thu Nov 29 02:51:27 EST 2018
Good day folks
I have a problem with SP 3 trying to generate an AuthnRequest with
<samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>
it always generates just <samlp:NameIDPolicy AllowCreate="1" />, i.e.
without the Format attribute.
I configured the sessioninitiator in the applicationdefaults bit, so my
shibboleth2.xml contains this piece of code:
....
....
<SessionInitiator type="Chaining" Location="/Login" isDefault="true"
id="Login">
<SessionInitiator type="SAMLDS" URL="..." />
<SessionInitiator type="SAML2" acsIndex="1"
template="bindingTemplate.html"
authnContextClassRef="https://www.spid.gov.it/SpidL2"
authnContextComparison="exact">
<samlp:AuthnRequest ForceAuthn="true" ID="ID0001"
Version="2.0" IssueInstant="2016-05-23T08:08:24Z"
AttributeConsumingServiceIndex="1">
<saml:Issuer NameQualifier="my_sp"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">my_sp</saml:Issuer>
<samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>
</samlp:AuthnRequest>
</SessionInitiator>
</SessionInitiator>
....
....
I had no problem with previous versions of SP still in prod.
could please anyone help me?
thanks
Marcello
--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list