<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I am having issues in my attempt to get ECP working. I can retrieve the initial ECP SOAP authentication request message from the SP. I then post something similar to the following to the IdP (URL is
<a href="https://example-idp.org/idp/profile/SAML2/SOAP/ECP">https://example-idp.org/idp/profile/SAML2/SOAP/ECP</a>) with the basic authorization headers:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><S:Envelope xmlns:S="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"><o:p></o:p></p>
<p class="MsoNormal"> <S:Header/><o:p></o:p></p>
<p class="MsoNormal"> <S:Body><o:p></o:p></p>
<p class="MsoNormal"> <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="<a href="https://example.org/Shibboleth.sso/SAML2/ECP">https://example.org/Shibboleth.sso/SAML2/ECP</a>"
ID="_550cad63fe809d0ad9b2451e8790c904" <o:p></o:p></p>
<p class="MsoNormal"> IssueInstant="2013-07-25T01:20:34Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Version="2.0"><o:p></o:p></p>
<p class="MsoNormal"> <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://example.org/shibboleth%3c/saml:Issuer">https://example.org/shibboleth</saml:Issuer</a>><o:p></o:p></p>
<p class="MsoNormal"> <samlp:NameIDPolicy AllowCreate="1"/><o:p></o:p></p>
<p class="MsoNormal"> </samlp:AuthnRequest><o:p></o:p></p>
<p class="MsoNormal"> </S:Body><o:p></o:p></p>
<p class="MsoNormal"></S:Envelope><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">And I receive in return a http response code of 500 with the following message:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="FR"><env:Envelope xmlns:env="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <env:Body><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <env:Fault><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR"> <faultcode>env:Client</faultcode><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="FR">
</span><faultstring>An error occurred processing the request.</faultstring><o:p></o:p></p>
<p class="MsoNormal"> <detail/><o:p></o:p></p>
<p class="MsoNormal"> </env:Fault><o:p></o:p></p>
<p class="MsoNormal"> </env:Body><o:p></o:p></p>
<p class="MsoNormal"></env:Envelope><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Would someone one this list perhaps have an idea of why the env:Client fault response is occuring?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I note that uApprove is installed and running on the IdP I am trying to authenticate with and that there were issues in 2011 with this (<a href="http://marc.info/?l=shibboleth-users&m=132162809207049&w=2">http://marc.info/?l=shibboleth-users&m=132162809207049&w=2</a>).
Could uApprove be the cause of the response or is there something wrong with the message that I am sending to the IdP, or could it be something else?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">N.B. example-idp.org and example.org are not the actual addresses I am sending to but rather are representative.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Genevieve<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>