Issue setting up SSO with Graduway

Christopher Bongaarts cab at umn.edu
Tue Jul 23 22:38:34 UTC 2024


On 7/23/2024 3:35 PM, Alberto DeAngelis via users wrote:
> This is the error I see in SAML tracer:
>
> <saml2p:Status><saml2p:StatusCode 
> Value="urn:oasis:names:tc:SAML:2.0:status:Responder" 
> /><saml2p:StatusMessage>An error 
> occurred.</saml2p:StatusMessage></saml2p:Status>
>
> Auth logs:
>
> shib-idp;idp-process.log;dev;nothing; - [10.0.0.0]2024-07-23 
> 20:02:22,802 - INFO [Shibboleth-Audit.SSO:338] - 
> 2024-07-23T20:02:22.802073Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|idaa21fd7db0d14dfa9555524d77cad219|https://api.prod.us-east1.manual.graduway.com/Saml2|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://<some_url>/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_05e22dd43dc51fb8e7ba2ff55715e605||||||
>
The error should be somewhere above the audit line in the 
idp-process.log.  It might be due to using "graduway" instead of the 
full SP entity ID in the c:relyingPartyIds in your relying party entry 
to turn off encryption.

-- 
%%  Christopher A. Bongaarts   %%cab at umn.edu           %%
%%  OIT - Identity Management  %%http://umn.edu/~cab   %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240723/3a4b840a/attachment.htm>


More information about the users mailing list