Trying to setup Shibboleth for Google Apps for Education

[Melvin Lasky]

Hey Scott, 
	Thanks! Added this to my relying-party.xml

        <bean parent="RelyingPartyByName" c:relyingPartyIds="google.com/a/gtest.manhattan.edu">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:encryptAssertions="false" />
                </list>
            </property>
        </bean>

And now, I’m a little further.

This account cannot be accessed because we could not parse the login request.
We are unable to process your request at this time, please try again later.


That’s what I’m getting now….

shib-idp;idp-process.log;dev;nothing;2019-03-26 14:02:30,013 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'melvin.lasky2' succeeded
shib-idp;idp-process.log;dev;nothing;2019-03-26 14:02:30,257 - WARN [org.opensaml.saml.common.binding.SAMLBindingSupport:93] - Relay state exceeds 80 bytes: https://accounts.google.com/CheckCookie?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&hl=en&ss=1&scc=1&rm=false&checkedDomains=youtube&checkConnection=youtube%3A218%3A1&pstMsg=1&osid=1
shib-idp;idp-warn.log;dev;nothing;2019-03-26 14:02:30,257 - WARN [org.opensaml.saml.common.binding.SAMLBindingSupport:93] - Relay state exceeds 80 bytes: https://accounts.google.com/CheckCookie?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&hl=en&ss=1&scc=1&rm=false&checkedDomains=youtube&checkConnection=youtube%3A218%3A1&pstMsg=1&osid=1
shib-idp;idp-audit.log;dev;nothing;20190326T140230Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|miaooehmnkkfmhedbjkacgdcecgipcplkjlcojfj|google.com/a/gtest.manhattan.edu|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://auth.manhattan.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_432a9a3f851b6c01f62848450830acfa|melvin.lasky2|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|Gprincipal||_7c0fd87c3bbda4843f1ba77d557b53e9|
shib-idp;idp-process.log;dev;nothing;2019-03-26 14:02:30,272 - INFO [Shibboleth-Audit.SSO:275] - 20190326T140230Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|miaooehmnkkfmhedbjkacgdcecgipcplkjlcojfj|google.com/a/gtest.manhattan.edu|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://auth.manhattan.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_432a9a3f851b6c01f62848450830acfa|melvin.lasky2|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|Gprincipal||_7c0fd87c3bbda4843f1ba77d557b53e9|

——

I feel I’m pretty close :-).

Any help would be awesome!

Thanks

Mel


Melvin Lasky
Associate Director of Enterprise Architecture





Riverdale, NY 10471
Phone: 718-862-7410
melvin.lasky at manhattan.edu <mailto:melvin.lasky at manhattan.edu>
www.manhattan.edu <http://www.manhattan.edu/>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190326/a7aa4894/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190326/a7aa4894/attachment.jpg>