Message context was not authenticated error while single logout

Sharmistha sharmistha.0688 at gmail.com
Wed Mar 27 09:39:47 EDT 2019


Hi,
My problem is regarding single logout.
I have configured two SPs and have logged in both the SPs successfully.
Then I have initiated logout from the first SP after that propagation page
has come with my second SP name and a red cross.

I have logged out from the initiating SP and the IDP server but I am not
logging out from the second SP.
I find the below information in the log.
org.opensaml.messaging.handler.MessageHandlerException: Message context was
not authenticated
	at
org.opensaml.messaging.handler.impl.CheckMandatoryAuthentication.doInvoke(CheckMandatoryAuthentication.java:70)
2019-03-27 13:16:46,703 - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
occurred while processing the request: MessageAuthenticationError
2019-03-27 13:16:46,704 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] - No
SAMLBindingContext or binding URI available, error must be handled locally

I find that the logout response from the initiating SP is coming with the
signature but 
the logout response coming from the 2nd SP to IDP is without signature.
and from the SP the request is redirected to the below URL
idp/profile/SAML2/Redirect/SLO?SAMLResponse=fZJfT8IwFMW%2FytL3rWvHn61hI0ZiQoIxAeTBF9N2F6iOdtnt0I%2FvQFAkhsfennPP7a93NP7cVcEeGj
 
with 400 Bad request status.but with the SAML success logout response 
<saml2p:Status>
        <saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
    </saml2p:Status>

Please suggest to avoid these situation and why this is happening do I need
to change any thing in the configurations?



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list