Problem generating AuthnRequest with SP 3

marangiom m.marangio at innova.puglia.it
Thu Nov 29 02:51:27 EST 2018


Good day folks

I have a problem with SP 3 trying to generate an AuthnRequest with
<samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>

it always generates just  <samlp:NameIDPolicy AllowCreate="1" />, i.e.
without the Format attribute.


I configured the sessioninitiator in the applicationdefaults bit, so my
shibboleth2.xml contains this piece of code:

....
....
<SessionInitiator type="Chaining"  Location="/Login" isDefault="true"
id="Login">
               <SessionInitiator type="SAMLDS"  URL="..." />

               <SessionInitiator type="SAML2"  acsIndex="1" 
template="bindingTemplate.html"
authnContextClassRef="https://www.spid.gov.it/SpidL2"
authnContextComparison="exact">
                       <samlp:AuthnRequest  ForceAuthn="true" ID="ID0001"
Version="2.0" IssueInstant="2016-05-23T08:08:24Z"
AttributeConsumingServiceIndex="1">
                       <saml:Issuer  NameQualifier="my_sp"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">my_sp</saml:Issuer>
                       <samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>

                       </samlp:AuthnRequest>
               </SessionInitiator>
       </SessionInitiator>
....
....

I had no problem with previous versions of SP still in prod.

could please anyone help me?
thanks
Marcello 



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list