<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div><div style="background-color: #fdfdfd;" data-mce-style="background-color: #fdfdfd;"><span style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;">I'm new to Shibboleth and implementing SSO. I'm trying to test my new installation of shibboleth-idp by using testshib and getting the following:</span><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><br></div><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;">opensaml::FatalProfileException at (<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>)</span></div><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;">Error from identity provider:</span></div><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"><span style="text-align: left; background-color: #ffffff;" data-mce-style="text-align: left; background-color: #ffffff;"><span class="Apple-tab-span" style="white-space: pre;" data-mce-style="white-space: pre;"> </span>Status:</span><span style="text-align: left; background-color: #ffffff;" data-mce-style="text-align: left; background-color: #ffffff;"> urn:oasis:names:tc:SAML:2.0:status:Responder</span></span></div><span style="font-size: medium; font-family: Geneva;" data-mce-style="font-size: medium; font-family: Geneva;"><span style="text-align: left; background-color: #ffffff;" data-mce-style="text-align: left; background-color: #ffffff;"><span class="Apple-tab-span" style="white-space: pre;" data-mce-style="white-space: pre;"> </span>Sub-Status:</span><span style="text-align: left; background-color: #ffffff;" data-mce-style="text-align: left; background-color: #ffffff;"> urn:oasis:names:tc:SAML:2.0:status:AuthnFailed</span></span><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;">I'm sure my configuration is not complete/correct. In login.config I'm attempting to get it to talk to LDAP but my LDAP logs show no activity whatsoever during this time frame. What I think is pertinent information is below. I'd appreciate any hints and/or nudges in the right direction.</span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;">login.config snippet:</span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';">ShibUserPassAuth {</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> edu.vt.middleware.ldap.jaas.LdapLoginModule required</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> ldapUrl="<a href="ldap://myLDAP.me.com:389" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="ldap://myLDAP.me.com:389" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">ldap://myLDAP.me.com:389</a>"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> baseDn="dc=me,dc=com"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> bindDn="cn=Manager,dc=me,dc=com"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> bindCredential="itsasecret"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> tls="false"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> ssl="false"</span></div></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;">relying-party.xml snippet:</span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:MetadataProvider id="URLMD" xsi:type="metadata:FileBackedHTTPMetadataProvider"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> metadataURL="<a href="http://www.testshib.org/metadata/testshib-providers.xml" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="http://www.testshib.org/metadata/testshib-providers.xml" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">http://www.testshib.org/metadata/testshib-providers.xml</a>"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> backingFile="testshib.xml"></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <!--</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:MetadataFilter xsi:type="metadata:ChainingFilter"></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:MetadataFilter xsi:type="metadata:RequiredValidUntil"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> maxValidityInterval="P7D" /></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:MetadataFilter xsi:type="metadata:SignatureValidation"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> trustEngineRef="shibboleth.MetadataTrustEngine"</span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> requireSignedMetadata="true" /></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:MetadataFilter xsi:type="metadata:EntityRoleWhiteList"></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> <metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> </metadata:MetadataFilter></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> </metadata:MetadataFilter></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> --></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> </metadata:MetadataProvider></span></div><div><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"> </metadata:MetadataProvider></span></div></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: Geneva;" data-mce-style="font-family: Geneva;"> </span></div><div><br></div><div><span style="font-family: Geneva; text-align: left;" data-mce-style="font-family: Geneva; text-align: left;">idp-process.log:</span></div></div><div style="font-family: Helvetica; font-size: medium;" data-mce-style="font-family: Helvetica; font-size: medium;"><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.788 - DEBUG [PROTOCOL_MESSAGE:113] - </div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div><?xml version="1.0" encoding="UTF-8"?><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>" Destination="<a href="https://myidp.me.com/idp/profile/SAML2/Redirect/SSO" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/profile/SAML2/Redirect/SSO" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com/idp/profile/SAML2/Redirect/SSO</a>" ID="_c86cd863ed09aea7d64e85a08e1903fe" IssueInstant="2013-07-11T23:45:08Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://sp.testshib.org/shibboleth-sp%3C/saml:Issuer%3E" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp%3C/saml:Issuer%3E" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</saml:Issuer></a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <samlp:NameIDPolicy AllowCreate="1"/></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div></samlp:AuthnRequest></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.789 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a>, looking up configuration based on metadata groups.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.790 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a>. Using default relying party configuration.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.790 - DEBUG [org.opensaml.ws.message.decoder.BaseMessageDecoder:130] - Evaluating security policy of type 'edu.internet2.middleware.shibboleth.common.security.ShibbolethSecurityPolicy' for decoded message</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.791 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:308] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:250] - Metadata document did not contain a descriptor for entity <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:317] - Metadata document did not contain any role descriptors of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for entity <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:286] - Metadata document does not contain a role of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting protocol urn:oasis:names:tc:SAML:2.0:protocol for entity <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:308] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.792 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.793 - DEBUG [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:64] - Evaluating simple signature rule of type: org.opensaml.saml2.binding.security.SAML2HTTPRedirectDeflateSignatureRule</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.793 - DEBUG [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:64] - Evaluating simple signature rule of type: org.opensaml.saml2.binding.security.SAML2HTTPPostSimpleSignRule</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.793 - DEBUG [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:81] - Rule can not handle this request, skipping processing</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.793 - DEBUG [org.opensaml.ws.message.decoder.BaseMessageDecoder:85] - Successfully decoded message.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.795 - DEBUG [org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder:219] - SAML message intended destination endpoint matched recipient endpoint</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.795 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:387] - Decoded request from relying party '<a href="https://sp.testshib.org/shibboleth-sp'" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp'" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp'</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.796 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.797 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a>. Using default relying party configuration.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.797 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:226] - Creating login context and transferring control to authentication engine</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.800 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:181] - Storing LoginContext to StorageService partition loginContexts, key 42ffb6dea5d2d90edd4e9e669234553ac50cf97bfc45dc88a9d30df541f91308</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.800 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:240] - Redirecting user to authentication engine at <a href="https://myidp.me.com/idp/AuthnEngine" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/AuthnEngine" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com:443/idp/AuthnEngine</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.804 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.804 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:240] - Beginning user authentication process.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.804 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:283] - Filtering configured LoginHandlers: {urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession=edu.internet2.middleware.shibboleth.idp.authn.provider.PreviousSessionLoginHandler@63cb110c, urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified=edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler@28cc5e03}</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:332] - Filtering out previous session login handler because there is no existing IdP session</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:464] - Selecting appropriate login handler from filtered set {urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified=edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler@28cc5e03}</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:497] - Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler:66] - Redirecting to <a href="https://myidp.me.com/idp/Authn/RemoteUser" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/Authn/RemoteUser" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com:443/idp/Authn/RemoteUser</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.810 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserAuthServlet:77] - No remote user information was present in the request</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.810 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.811 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.811 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514] - Completing user authentication process</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.811 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585] - Validating authentication was performed successfully</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.811 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:618] - No user identified by login handler.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.816 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] - Authentication failed with the error:</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No user identified by login handler.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div><span class="Apple-tab-span" style="white-space: pre;" data-mce-style="white-space: pre;"> </span>at java.lang.Thread.run(Thread.java:722) [na:1.7.0_21]</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.817 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161] - Returning control to profile handler</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.817 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177] - Redirecting user to profile handler at <a href="https://myidp.me.com/idp/profile/SAML2/Redirect/SSO" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/profile/SAML2/Redirect/SSO" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com:443/idp/profile/SAML2/Redirect/SSO</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.822 - INFO [Shibboleth-Access:73] - 20130711T234508Z|137.168.66.32|<a href="http://myidp.me.com/" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="http://myidp.me.com/" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">myIdp.me.com</a>:443|/profile/SAML2/Redirect/SSO|</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.822 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.823 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.823 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:588] - Unbinding LoginContext</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.823 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:614] - Expiring LoginContext cookie</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.823 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:625] - Removed LoginContext, with key 42ffb6dea5d2d90edd4e9e669234553ac50cf97bfc45dc88a9d30df541f91308, from StorageService partition loginContexts</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.823 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:178] - Incoming request contains a login context and indicates there was an error authenticating the principal, processing second leg of request</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.825 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.825 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a>, looking up configuration based on metadata groups.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.825 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.825 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://sp.testshib.org/shibboleth-sp" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp</a>. Using default relying party configuration.</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="https://myidp.me.com/idp/shibboleth" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/shibboleth" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com/idp/shibboleth</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.826 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of <a href="https://myidp.me.com/idp/shibboleth" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/shibboleth" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com/idp/shibboleth</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.830 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69] - Selecting endpoint by ACS URL '<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST'" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST'" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/Shibboleth.sso/SAML2/POST'</a> and protocol binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' for request '_c86cd863ed09aea7d64e85a08e1903fe' from entity '<a href="https://sp.testshib.org/shibboleth-sp'" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/shibboleth-sp'" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/shibboleth-sp'</a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>...</div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div>19:45:08.873 - DEBUG [PROTOCOL_MESSAGE:74] - </div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div><?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>" ID="_0f25317e9aa351286f042d0920247911" InResponseTo="_c86cd863ed09aea7d64e85a08e1903fe" IssueInstant="2013-07-11T23:45:08.832Z" Version="2.0"></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"><a href="https://myidp.me.com/idp/shibboleth%3C/saml2:Issuer%3E" target="_blank" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://myidp.me.com/idp/shibboleth%3C/saml2:Issuer%3E" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://myIdp.me.com/idp/shibboleth</saml2:Issuer></a></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <saml2p:Status></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"/></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> </saml2p:StatusCode></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div> </saml2p:Status></div><span style="text-align: left;" data-mce-style="text-align: left;"><span style="font-family: 'Andale Mono';" data-mce-style="font-family: 'Andale Mono';"></span></span><div></saml2p:Response></div><div><br></div></div></div><div style="background-color: #fdfdfd;" data-mce-style="background-color: #fdfdfd;">Thanks,</div><div style="background-color: #fdfdfd;" data-mce-style="background-color: #fdfdfd;">Gene</div></div><div><br></div><div><span name="x"></span><div>Gene Matthews<br>Systems Integration and Engineering (SIE)<br>Hitachi CTA, Inc.<br>3617 Parkway Lane<br>Norcross, GA 30092<br>M: 678.994.1374<br>O: 770.797. 2552 <br>F: 770-797-2550<br>Gene.Matthews@hitachi-cta.com<br>www.hitachi-cta.com</div><span name="x"></span><br></div></div></body></html>