Port number in SubjectConfirmationData

[Nickles, Brent]

Good morning,

I'm not certain if this is a IdP configuration issue, or a vendor not properly following the protocol.

Qualtrics authentication is failing based on the following from tech support.

  *   <saml2:SubjectConfirmationData Address=\"69.250.184.177:62349<http://69.250.184.177:62349/>\" InResponseTo=\"_489db8c5640720b61a21c2d1998a6553\" NotOnOrAfter=\"2024-12-05T17:57:12.197Z\" Recipient=\"https://umaryland.az1.qualtrics.com/WRSAML/simplesaml/www/module.php/saml/sp/saml2-acs.php/default-sp\<https://umaryland.az1.qualtrics.com/WRSAML/simplesaml/www/module.php/saml/sp/saml2-acs.php/default-sp%5C>"/>

This is an invalid IP address. The "Address" field in the above shows 69.250.184.177:62349<http://69.250.184.177:62349/> , where 62329 is being appended to the actual IP address.


Oddly enough, one of our servers in our load balanced configuration is NOT sending over the port and authN seems to be working as expected.

Any guidance on where to this mismatch would be, or even should we make a change?

Thanks in advance
Brent





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241206/73c29c7d/attachment.htm>