error processing incoming assertion: KeyName must have TextContent.

Cantor, Scott cantor.2 at osu.edu
Wed Mar 18 14:26:50 EDT 2020


On 3/18/20, 2:20 PM, "users on behalf of Sathyaprasad, Sandeep (NIH/CIT) [C]" <users-bounces at shibboleth.net on behalf of sathyaprasads at mail.nih.gov> wrote:

> Do you happen to know how can I get past this error? 

You can't (assuming they won't fix it). The empty KeyName element is not valid in SAML and the SP blocks empty element to prevent null pointer crashes all over the code from accessing content that's not supposed to be null without adding even more checking than it has to do already. It's a blanket security measure that limits the attack surface.
 
-- Scott
 



More information about the users mailing list