IdP issue with previously working SP metadata

[IAM David Bantz]

An SP apparently successfully relying on our IdP for the last year has is
now not being recognized by the IdP with the following sequence of messages
in the IdP-process.log:

INFO [137.229.156.18]
org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128 >  Message
Handler:  No metadata returned for https://sso.siteimprove.com/auth/Saml2/8341
in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol
urn:oasis:names:tc:SAML:2.0:protocol


WARN [137.229.156.18]
net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111 >  Profile
Action SelectProfileConfiguration: Profile
http://shibboleth.net/ns/profiles/saml2/sso/browser is not available for RP
configuration shibboleth.UnverifiedRelyingParty (RPID https://sso.
siteimprove.com/auth/Saml2/8341)

10:11:47:983


WARN [137.229.156.18] org.opensaml.profile.action.impl.LogEvent:105 >  A
non-proceed event occurred while processing the request:
InvalidProfileConfiguration


---


The SAML request was:


<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
> xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
> ID="_391f250e-98e7-4165-8652-76f2e94d9fe2"
> Version="2.0"
> IssueInstant="2019-03-11T19:30:22.8580106Z"
> Destination="https://idp.alaska.edu/idp/profile/SAML2/Redirect/SSO"
> AssertionConsumerServiceURL="
> https://sso.siteimprove.com/auth/Saml2/8341/Post">
> <saml2:Issuer>https://sso.siteimprove.com/auth/Saml2/8341</saml2:Issuer>
> </saml2p:AuthnRequest>

---

metadata in the IdP for this service is minimal at best:

>
> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://sso.siteimprove.com/auth/Saml2/8341" ID="_a863e4c7-48b7-434a-a9a2-f78de29cc219" validUntil="2019-03-09T23:42:46.8211310Z">
>
>         <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="true">
>         <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="true">
>
>         <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.siteimprove.com/auth/Saml2/8341/Post" index="0" isDefault="true"/>
>         <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.siteimprove.com/auth/Saml2/8341/Post" index="0" isDefault="true"/>
>
>             <md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
>             <md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
>
>                 <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
>                 <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
>
>                 <mdui:DisplayName xml:lang="en">UAA SiteImprove</mdui:DisplayName>
>                 <mdui:DisplayName xml:lang="en">UAA SiteImprove</mdui:DisplayName>
>
>                 </mdui:UIInfo>
>                 </mdui:UIInfo>
>
>             </md:Extensions>
>             </md:Extensions>
>
>         </md:SPSSODescriptor>
>         </md:SPSSODescriptor>
>
>         <ContactPerson contactType="administrative">
>         <ContactPerson contactType="administrative">
>
>         <GivenName>Brandon Wood</GivenName>
>         <GivenName>Brandon Wood</GivenName>
>
>         <EmailAddress>bcwood at alaska.edu</EmailAddress>
>         <EmailAddress>bcwood at alaska.edu</EmailAddress>
>
>     </ContactPerson>
>     </ContactPerson>
>
> </md:EntityDescriptor>
> </md:EntityDescriptor>


Thanks for pointers!

David Bantz
UA OIT IAM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190311/0660b746/attachment.html>