<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>On Oct 1, 2012, at 3:27 PM, "Jayashree Ravi" <<a href="mailto:jravi123@hotmail.com">jravi123@hotmail.com</a>> wrote:</div>
<div><br>
</div>
<blockquote type="cite">
<div><style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">
<div>We added SAML2 endpoints to support SAML2 IDP's We do receive the attributes from the IDP in the response which we see in the signature.log file as well. However we do not see any reference to attributes in transaction.log and also we see the following
error message in native.log. Not sure if these are related.</div>
<div><br>
</div>
<div><br>
</div>
<div>shib_handler: invalid acsIndex property, or non-SAML 1.x ACS, using default SAML 1.x ACS</div>
</div>
</div>
</blockquote>
<div><br>
</div>
That means your configuration is wrong but it's compensating for the mistake, but that involves SAML 1.1 usage, not SAML 2.<br>
<br>
<blockquote type="cite">
<div>
<div dir="ltr">
<div>Our shibboleth2.xml file has the following tags added to support SAML 2</div>
</div>
</div>
</blockquote>
<div><br>
</div>
You have a much more complex approach than you need. I urge you to update your file to reflect the syntax in newer releases to simplify all that and fix the endpoint index mistakes.
<div><br>
<blockquote type="cite">
<div dir="ltr">
<div>
<p class="MsoPlainText"> <SessionInitiator type="Shib1" defaultACSIndex="1" ></p>
</div>
</div>
</blockquote>
Look at the SAML version in the ACS with that index. That's why you got the error.</div>
<div><br>
<blockquote type="cite">
<div dir="ltr">
<div>We are able to receive attributes from the existing SAML1 customers but we not SAML2 customers.</div>
</div>
</blockquote>
<div><br>
</div>
That's an attribute mapping issue, nothing to do with anything you posted here. The wiki documents the attribute mapping process.</div>
<div><br>
</div>
<div>-- Scott</div>
</body>
</html>