Custom flow with selection UI

[Cristiano Palazzi]

Hi,
I configured the SAML login flow but I am not able to complete the process.
The authentication is completed successfully on the "external" idp.

Analyzing the last lines of the logs I found the following error:

[org.opensaml.saml.saml2.assertion.impl.AssertionValidationSupport:65] -
Evaluating SubjectConfirmationData/@Address value of: xx.xx.xxx.xxx
[org.opensaml.saml.saml2.assertion.impl.AssertionValidationSupport:79] -
SubjectConfirmationData/@Address was resolved to addresses: [/xx.xx.xxx.xxx]
org.opensaml.saml.saml2.assertion.impl.AssertionValidationSupport:108] -
Failed to match SubjectConfirmationData/@Address to any supplied valid
addresses: [/127.0.0.1]
[org.opensaml.saml.saml2.assertion.SAML20AssertionValidator:786] - No
subject confirmation methods were met for assertion with ID
'_71443bcc5b5ccbdcb0d4b747d142141f'
[org.opensaml.saml.saml2.profile.impl.ValidateAssertions:329] - Profile
Action ValidateAssertions: Assertion validation result was: INVALID
[org.opensaml.saml.saml2.profile.impl.ValidateAssertions:331] - Profile
Action ValidateAssertions: Assertion validation failure msg was: No subject
confirmation methods were met for assertion with ID
'_71443bcc5b5ccbdcb0d4b747d142141f'
[net.shibboleth.idp.saml.saml2.profile.impl.ProcessAssertionsForAuthentication:217]
- Profile Action ProcessAssertionsForAuthentication: Removing 1 non-valid
Assertions from Response
[net.shibboleth.idp.saml.saml2.profile.impl.ProcessAssertionsForAuthentication:228]
- Profile Action ProcessAssertionsForAuthentication: No valid SAML
Assertions suitable for authentication were found

Thanks,
Cristiano



Il giorno lun 6 dic 2021 alle ore 15:50 Cantor, Scott <cantor.2 at osu.edu> ha
scritto:

> On 12/6/21, 9:45 AM, "users on behalf of Cristiano Palazzi" <
> users-bounces at shibboleth.net on behalf of cristianopalazzi at gmail.com>
> wrote:
>
> >    Thanks,and where should I put my own css file in order to be imported
> by the custom view ?
>
> Anywhere you want. If you want it in the context, use edit-webapp as you
> see fit to add any content you want. If you want it somewhere else, the web
> server is yours, put it anywhere you want.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211215/ddb43e1b/attachment.htm>