The status code of the Response was not Success, was Responder -> Error occurred

[Jason Kaye]

Instead of "success" status after sending request to Shibboleth IdP, we're seeing the following error: The status code of the Response was not Success, was Responder -> Error occurred


Looking at logs from the IdP, this is what we're seeing:

-Profile Action ProcessRequestedAuthnContext: Incoming RequestedAuthnContext disallowed by profile configuration

-A non-proceed event occurred while processing the request: InvalidAuthenticationContext|

-Error event InvalidAuthenticationContext will be handled with response


We're using the Onelogin Python SAML Library (), and our AuthnContext looks like this
    <samlp:RequestedAuthnContext Comparison="exact">
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>
This matches the configuration the IdP side as well. Are there any other settings I should be checking?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190327/f372e224/attachment.html>