SAML response signature is missing.

[Losen, Stephen C (scl)]

Hi Joshua,

This looks like a problem on the SP. It looks like the SP does not have the metadata for your IDP. Does the SP fetch it dynamically from a URL or does it read it from a local file?  Looks like you publish your IDP metadata with InCommon and that your IDP entityID is “urn:mace:incommon:ncsu.edu” However, I browsed https://shib.ncsu.edu/idp/shibboleth and got a metadata file that looks wrong because it has references to “localhost.localdomain” Not a problem unless the SP is fetching this file.

I browsed the link to your SP and I immediately got an error. I was not redirected to your IDP to login. So the problem is likely on the SP, or at least that is where to start looking.

If the SP has a local copy of the IDP metadata, look for an expiration date at the top: validUntil=”expiration-date” If this has expired then that could be the problem. You can edit the file and remove the validUntil attribute.

Steve Losen
ITS – Enterprise Infrastructure
University of Virginia
scl at virginia.edu<mailto:scl at virginia.edu>    434-924-0640

From: users <users-bounces at shibboleth.net> On Behalf Of Joshua Snapp
Sent: Friday, June 14, 2019 6:12 AM
To: users at shibboleth.net
Subject: SAML response signature is missing.

We could use help. Our primary system admin for our shibboleth IdP is unreachable while on vacation.
Here's a little version info about our IdP:
IdP version: 3.4.4
Java version: 1.8.0_212

One of our SPs suddenly started receiving the following messages:

Error when logging into https://www.ebenefitsnow.com/sso/saml:
SAML response signature is missing.

Other error reported by SP:
No inbound configuration found for issuer:
https://shib.ncsu.edu/idp/shibboleth

Can anyone provide insight into what may cause this behavior? We haven't made any changes to our configuration on the IdP. The configuration files are in version control. The last commit was April 16th. This problem just started on June 11th.

Thanks for any help you can provide.

--

Joshua Snapp

Systems Programmer - Identity and Web Services Group
North Carolina State University - Office of Information Technology

1.919.513.0183  jksnapp at ncsu.edu<mailto:jksnapp at ncsu.edu>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190614/1b66300d/attachment.html>