<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<br>
<div>
<div>
<div>On Nov 30, 2013, at 9:44 PM, Cantor, Scott wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>
<blockquote type="cite">
<blockquote type="cite">You'll have to compare the credentials on the IdP to the message in the<br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">log and to what's in the metadata you gave the SP.<br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><br>
</blockquote>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">In this context, what do we mean by credentials?<br>
</blockquote>
<br>
The signing keypair. The public key certificate principally, which is in<br>
idp.crt.<br>
<br>
To be honest, I would probably look into registering your SP with<br>
<a href="http://testshib.org">testshib.org</a> and running some tests with that. To rule out some kind of<br>
really low level problem with your system.<br>
</div>
</blockquote>
<div><br>
</div>
My team looked with joy at testshib until we realised the server needs to be on the internet to use it. Unfortunately, our security policies and network design don't permit any box we are building to be on DMZ or internet. Therefore we have to fix this some
other way.</div>
<div><br>
</div>
<div>Again, this is a test setup and the SP and IDP are both mine. If there's anything I can do with both to ensure they are happy with each other I can at this point change anything anywhere. The point here is that we know how to build a working setup because
this is a service we are soon offering.</div>
<div><br>
</div>
<div>I will be looking into the suggestions from your post. If I have success I will definitely post the solution to the list.</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Sam</div>
<div><br>
</div>
<div><br>
<blockquote type="cite">
<div><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</div>
</blockquote>
</div>
<br>
<div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; ">
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; "><br class="Apple-interchange-newline">
--</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Sam Agnew</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
System Administrator</div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">IT Department</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Weill Cornell Medical College in Qatar</font></div>
<div><br class="webkit-block-placeholder">
</div>
</span><br class="Apple-interchange-newline">
</div>
<br>
</div>
</body>
</html>