The status code of the Response was not Success, was Responder -> Error occurred

[Peter Schober]

* Jason Kaye <jakaye at syr.edu> [2019-03-27 17:21]:
> We're using the Onelogin Python SAML Library (), and our AuthnContext looks like this
>
>     <samlp:RequestedAuthnContext Comparison="exact">
>         <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
>     </samlp:RequestedAuthnContext>
>
> This matches the configuration the IdP side as well. Are there any
> other settings I should be checking?

Looks OK to me, can you do a bit-wise comparison from the string in
the logs? Maybe a control character snuck in or something?

Note that specifically requesting password-based authentication is not
advisable: All you'd possibly achieve is to pretent the use of
/stronger/ authentication methods (assuming all IDPs will run TLS so
excluding the 'Password' AC).
So maybe you should stop requesting any AC and solve two problems at once.

-peter