<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Oct 17, 2012, at 2:24 AM, Mauro Minella <<a href="mailto:Mauro.Minella@microsoft.com">Mauro.Minella@microsoft.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">>>>>>>>>><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">The problem is (I think) that there is no ACS URL with index 2 listed in Microsoft's Windows Azure AD metadata at<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><a href="https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml" style="color: purple; text-decoration: underline; ">https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml</a><o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br>In their example they have the following entry:<o:p></o:p></div><pre style="margin: 0cm 0cm 0.0001pt; font-size: 10pt; font-family: 'Courier New'; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location=<a href="https://login.microsoftonline.com/login.srf" style="color: purple; text-decoration: underline; ">"https://login.microsoftonline.com/login.srf"</a> index="2" /><o:p></o:p></pre><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><a href="http://technet.microsoft.com/en-us/library/jj205463.aspx" style="color: purple; text-decoration: underline; ">http://technet.microsoft.com/en-us/library/jj205463.aspx</a><br><br>Adding this in should fix the problem.<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">>>>>>>>>><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Unfortunately it did not work. To recap:<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span></div><br class="Apple-interchange-newline"></blockquote></div><div><br></div><recap deleted)<div><br><div>Hi Mauro,</div><div><br></div></div><div>I am sorry if I have confused you, but the metadata issue was causing the</div><div><div><span style="font-family: Calibri, sans-serif; font-size: 15px; ">No return endpoint available for relying party</span><span class="apple-converted-space" style="font-family: Calibri, sans-serif; font-size: 15px; "> </span><a href="urn:federation:MicrosoftOnline" style="color: purple; font-family: Calibri, sans-serif; font-size: 15px; ">urn:federation:MicrosoftOnline</a></div></div><div>log message, not the </div><div><span style="color: windowtext; font-family: Calibri, sans-serif; font-size: 11pt; ">javax.security.auth.login.LoginException: Cannot authenticate dn, invalid dn</span></div><div><div class="WordSection1" style="page: WordSection1; "><div><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext; ">message.</span></div><div><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext; "><br></span></div><div><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: windowtext; ">The first can be resolved by using static metadata (as described by Ryan), the second is an issue with your container's (Tomcat) "Remote User" authentication.</span></div><div><font face="Calibri, sans-serif"><span style="font-size: 15px;">If this issue keeps haunting you - is it an option to use a different container? Do you use Apache Web Server as a front end? Apache could take care of the remote user authentication as well.</span></font></div><div><font face="Calibri, sans-serif"><span style="font-size: 15px;"><br></span></font></div><div><font face="Calibri, sans-serif"><span style="font-size: 15px;">Cheers,</span></font></div><div><font face="Calibri, sans-serif"><span style="font-size: 15px;">--</span></font></div><div><font face="Calibri, sans-serif"><span style="font-size: 15px;">Joost</span></font></div></div><span style="background-color: rgb(255, 255, 255); "></span></div></body></html>