<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
        {font-family:Calibri}
@font-face
        {font-family:Tahoma}
@font-face
        {font-family:Verdana}
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif"}
h2
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:20.5pt;
        font-family:"Times New Roman","serif";
        color:#CC0000}
h3
        {margin-top:7.5pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        font-size:14.5pt;
        font-family:"Times New Roman","serif";
        color:black}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif"}
span.Heading2Char
        {font-family:"Times New Roman","serif";
        color:#CC0000;
        font-weight:bold}
span.Heading3Char
        {font-family:"Times New Roman","serif";
        color:black;
        font-weight:bold}
span.BalloonTextChar
        {font-family:"Tahoma","sans-serif"}
span.EmailStyle21
        {font-family:"Calibri","sans-serif";
        color:windowtext}
span.EmailStyle22
        {font-family:"Calibri","sans-serif";
        color:#1F497D}
.MsoChpDefault
        {font-size:10.0pt}
@page WordSection1
        {margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
        {}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal">I recently installed latest SP 2.4.3 win 64 on a sandbox and the testing went well. However when we implemented the same on a stage Windows 2008 (IIS 7.5) server some users are facing the below error and I don&#8217;t see anything logged in the
 log file. This happens after they logon to the Idp and when Idp post the information. In some cases this happens even before showing the Idp. The below URL was displayed in the IE when this error was displayed. Please advise.</p>
<p class="MsoNormal">&nbsp;</p>
<p class="MsoNormal">URL 1:</p>
<p class="MsoNormal"><a href="https://ucastage82.sumtotalsystems.com/Shibboleth.sso/Login?SAMLDS=1&amp;target=ss%3Amem%3A9cd0b3fc3525c440b2d6106e4235b1c6ba9ad870&amp;entityID=urn%3Amace%3Aincommon%3Aucop.edu">https://ucastage82.sumtotalsystems.com/Shibboleth.sso/Login?SAMLDS=1&amp;target=ss%3Amem%3A9cd0b3fc3525c440b2d6106e4235b1c6ba9ad870&amp;entityID=urn%3Amace%3Aincommon%3Aucop.edu</a></p>
<p class="MsoNormal">&nbsp;</p>
<p class="MsoNormal">URL 2:</p>
<p class="MsoNormal"><a href="https://ucastage82.sumtotalsystems.com/Shibboleth.sso/SAML/POST">https://ucastage82.sumtotalsystems.com/Shibboleth.sso/SAML/POST</a></p>
<p class="MsoNormal">&nbsp;</p>
<p class="MsoNormal">Error displayed in IE:</p>
<p class="MsoNormal">Server error:</p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:14.5pt; font-family:&quot;Verdana&quot;,&quot;sans-serif&quot;; color:#CC0000">401 - Unauthorized: Access is denied due to invalid credentials.</span></b></p>
<p class="MsoNormal" style="margin-top:7.5pt; background:white"><b><span style="font-size:10.0pt; font-family:&quot;Verdana&quot;,&quot;sans-serif&quot;; color:black">You do not have permission to view this directory or page using the credentials that you supplied.</span></b></p>
<p class="MsoNormal">&nbsp;</p>
<p class="MsoNormal">Thanks,</p>
<p class="MsoNormal">Bharathy Mohan.</p>
</div>
<table cellspacing="0" cellpadding="0" width="675" border="0" style="font-size:9pt; width:675px; font-family:verdana; height:135px">
<tbody>
<tr>
<td style="padding-left:10px; font-size:8pt; color:#666666; line-height:140%"></td>
</tr>
<tr>
<td style="padding-right:5px; padding-left:5px; font-size:6pt; padding-bottom:5px; color:#000000; padding-top:5px">
<span style="font-size:10px">This message and any attachments thereto contain information that may be privileged, confidential or otherwise protected from disclosure and is the property of SumTotal Systems, Inc.&nbsp; It is intended only for the person to whom it
 is addressed.&nbsp; If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message, any attachments thereto or any part thereof.&nbsp; If you receive this message in error, please notify me at
</span><a href="mailto:BharathyM@sumtotalsystems.com"><span style="font-size:10px">BharathyM@sumtotalsystems.com</span></a><span style="font-size:10px"> and delete all copies of this message and attachments.&nbsp;&nbsp; SumTotal Systems, Inc. has implemented anti-virus
 software on its computers and servers, however, it is the recipient's own responsibility to ensure that all attachments are scanned for viruses prior to usage.
</span></td>
</tr>
</tbody>
</table>
</body>
</html>