Shibboleth SP 500 after processing valid SAML response and assertion

[Cantor, Scott]

On 10/1/18, 8:37 PM, "users on behalf of Thomas Blanchard" <users-bounces at shibboleth.net on behalf of tblanchard at linkedin.com> wrote:

> It looks like in this case, the SP did not emit any error or warning, but simply dropped the assertion. Is this expected
> behavior ?

The AuthnInstant is not going to matter to the SP unless it's told to look at it, so that wasn't the issue, and no, I don't believe that it would ever log nothing. It might throw an exception and log something only in native.log, but it rarely if ever would log nothing unless it crashed.

> We managed to test a successful login by fiddling with test servers' time to confirm this is the issue.

That simply can't be the reason. If the freshness or condition timestamps were off, then it would have rejected it due to those values, but not because of AuthnInstant. And I still believe it would log it somewhere.

-- Scott