IdP issue with previously working SP metadata

Robert Duncan Robert.Duncan at ncirl.ie
Tue Mar 12 04:55:29 EDT 2019


There seems to be something of a second attempt from that provider

https://sso2.siteimprove.com/saml2/metadata


-          They don’t just talk the talk!

Robert Duncan.





From: users [mailto:users-bounces at shibboleth.net] On Behalf Of IAM David Bantz
Sent: Monday 11 March 2019 20:11
To: Christopher Bongaarts <cab at umn.edu>
Cc: Shib Users <users at shibboleth.net>
Subject: Re: IdP issue with previously working SP metadata

DOH!

On Mon, Mar 11, 2019 at 12:10 PM Christopher Bongaarts <cab at umn.edu<mailto:cab at umn.edu>> wrote:
On 3/11/2019 3:04 PM, IAM David Bantz wrote:
An SP apparently successfully relying on our IdP for the last year has is now not being recognized by the IdP with the following sequence of messages in the IdP-process.log:

metadata in the IdP for this service is minimal at best:



<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://sso.siteimprove.com/auth/Saml2/8341<http://mprove.com/auth/Saml2/8341>" ID="_a863e4c7-48b7-434a-a9a2-f78de29cc219" validUntil="2019-03-09T23:42:46.8211310Z">

        <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="true">



The "validUntil" in the EntityDescriptor says the metadata has been no good since 3/9...

--

%%  Christopher A. Bongaarts   %%  cab at umn.edu<mailto:cab at umn.edu>          %%

%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%

%%  University of Minnesota    %%  +1 (612) 625-1809    %%

________________________________
The information contained and transmitted in this e-mail is confidential information, and is intended only for the named recipient to which it is addressed. The content of this e-mail may not have been sent with the authority of National College of Ireland. Any views or opinions presented are solely those of the author and do not necessarily represent those of National College of Ireland. If the reader of this message is not the named recipient or a person responsible for delivering it to the named recipient, you are notified that the review, dissemination, distribution, transmission, printing or copying, forwarding, or any other use of this message or any part of it, including any attachments, is strictly prohibited. If you have received this communication in error, please delete the e-mail and destroy all record of this communication. Thank you for your assistance.
________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190312/ce551ffb/attachment.html>


More information about the users mailing list