<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Thanks, Marc. I asked them to correct that but was not sure if that was the issue based on the message.</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Marc Boorshtein <mboorshtein@gmail.com><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, February 7, 2013 1:38 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: IdP initiated SSO<br> </font> </div> <br>
NotOnorAfter is blank...<br><br>On Thu, Feb 7, 2013 at 4:35 PM, Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br>> This is what was sent:<br>><br>> <saml:SubjectConfirmation<br>> Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"><br>> <saml:SubjectConfirmation<br>> Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><br>> <saml:SubjectConfirmationData NotOnOrAfter=""<br>> Recipient="<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank">https://shib.lynda.com/Shibboleth.sso/SAML2/POST</a>"/><br>> </saml:SubjectConfirmation><br>> </saml:SubjectConfirmation><br>><br>> ________________________________<br>> From: Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com"
href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>><br>> To: Shib Users <<a ymailto="mailto:users@shibboleth.net" href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>> Sent: Thursday, February 7, 2013 1:23 PM<br>><br>> Subject: Re: IdP initiated SSO<br>><br>> Thanks. That leads me to the next item:<br>><br>> Unable to locate satisfiable bearer SubjectConfirmation in assertion.<br>><br>> Googling that produced a lot of code samples that generate the message but<br>> little else...<br>><br>> ________________________________<br>> From: Brent Putman <<a ymailto="mailto:putmanb@georgetown.edu" href="mailto:putmanb@georgetown.edu">putmanb@georgetown.edu</a>><br>> To: <a ymailto="mailto:users@shibboleth.net" href="mailto:users@shibboleth.net">users@shibboleth.net</a><br>> Sent: Thursday, February 7, 2013 1:08 PM<br>> Subject: Re: IdP initiated
SSO<br>><br>><br>> On 2/7/13 3:43 PM, Mike Flynn wrote:<br>><br>> The Idp tried both of these:<br>><br>> <saml:Conditions NotBefore="2013-02-07T19:51: 27Z"<br>> NotOnOrAfter="2013-02-07T19: 57:27Z"><br>> <AudienceRestriction><br>> <Audience><a href="https://shib.lynda.com/shibboleth-sp" target="_blank">https://shib.lynda.com/shibboleth-sp</a></Audience><br>> </AudienceRestriction><br>> </saml:Conditions><br>><br>> Or:<br>><br>> <saml:Conditions NotBefore="2013-02-07T19:46:<br>> 48Z" NotOnOrAfter="2013-02-07T19: 52:48Z"><br>> <AudienceRestrictionCondition><br>> <Audience><a href="https://shib.lynda.com/shibboleth-sp" target="_blank">https://shib.lynda.com/shibboleth-sp</a></Audience><br>> </ AudienceRestrictionCondition><br>> </saml:Conditions><br>> And gets this error with either one:<br>> xmltooling::
UnmarshallingException at (<a href="https://shib.lynda.com/" target="_blank">https://shib.lynda.com/</a><br>> Shibboleth.sso/SAML2/POST)<br>> Invalid child element:<br>> AudienceRestriction<br>><br>><br>><br>><br>> It's missing the namespace prefix. If they're binding the SAML namespace<br>> URI to prefix "saml", then those elements would be saml:AudienceRestriction,<br>> saml:Audience, etc.<br>><br>> AudienceRestrictionCondition doesn't exist in SAML. It should be similar to<br>> the first one you have above.<br>><br>><br>><br>><br>><br>><br>><br>> --<br>> To unsubscribe from this list send an email to<br>> <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>><br>><br>> --<br>> To unsubscribe from this list send an email to<br>> <a
ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>><br>><br>> --<br>> To unsubscribe from this list send an email to<br>> <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>