<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>I had an old cert on my old server from a cert rollover that I had done. I left it there for slow adopters - Once I restored that this issue was resolved.</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Saturday, August 10, 2013 11:37 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: After updating SP IIS to current version - 1 IDP giving error<br> </font> </div>
<div class="y_msg_container"><br>On 8/10/13 3:40 AM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>So far that is...<br>><br>>The error is this:<br>><br>>opensaml::FatalProfileException at<br>>(<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank">https://shib.lynda.com/Shibboleth.sso/SAML2/POST</a>)<br>>A valid authentication statement was not found in the incoming message.<br>><br>>Wiki says check logs for it - Log file just parrots that same message...<br>><br>>The school that fails is a member of CAF. I double checked their<br>>metadata - all looks good<br><br>You can't really verify that your metadata is correct for them, only they<br>can determine that. Assuming there's no indication of a decryption<br>failure, it could be a clock issue perhaps, or I guess with
absolutely<br>nothing else in the log, perhaps they're literally sending no assertions<br>in the response. Hard to say without the message.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>