<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m trying to use the spring-security-saml2-sample webapp, in Tomcat, with ADFS as IdP. ADFS uses Artifact binding, so I need to import its certificate into the samlKeystore.jks keystore. The documentation says to use:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> keytool -importcert -alias domaina.public –file domaina.public.cer -keystore samlKeystore.jks<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> (I used the SSLExtractor utility to extract the key into file domaina.public.cer)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">and this succeeds, but things still don’t work. I have used an arbitrary alias “domaina.public” does this have to get referenced somewhere?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The error I get is:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <span style="mso-fareast-language:EN-GB"><img width="522" height="274" id="Picture_x0020_1" src="cid:image003.jpg@01CF1C4B.130C6CA0"></span><o:p></o:p></p>
<p class="MsoNormal">If I change ADFS to use POST, I get a different error:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <span style="mso-fareast-language:EN-GB"><img width="615" height="212" id="Picture_x0020_2" src="cid:image004.jpg@01CF1C4B.130C6CA0"></span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Very grateful for any help,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">Mick Francis</span></b><b><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:EN-GB">Senior Software Engineer</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">office</span></b><span style="color:black;mso-fareast-language:EN-GB">: +44 (0)845 838 4646<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">direct:</span></b><span style="color:black;mso-fareast-language:EN-GB"> +44 (0)1344 350427<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">mobile</span></b><span style="color:black;mso-fareast-language:EN-GB">: +44 (0)7981 027106</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">fax</span></b><span style="color:black;mso-fareast-language:EN-GB">: +44 (0)1344 457550</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">e-mail</span></b><span style="color:black;mso-fareast-language:EN-GB">:
</span><span style="mso-fareast-language:EN-GB"><a href="mailto:first.last@lightfootsolutions.com"><span style="color:blue">mick.francis@lightfootsolutions.com
</span></a></span><span style="mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black;mso-fareast-language:EN-GB">web</span></b><span style="color:black;mso-fareast-language:EN-GB">:
</span><span style="mso-fareast-language:EN-GB"><a href="http://www.lightfootsolutions.com/"><span style="color:blue">www.lightfootsolutions.com</span></a></span><span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"> </span><span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:EN-GB">Lightfoot and
<b>signalsfromnoise®</b>(<b>sfn</b>) – A powerful approach to performance improvement</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Lightfoot Solutions UK Limited</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Richmond House<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Oldbury<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Bracknell<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Berkshire<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">RG12 8TQ</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Important Notice</span></b><b><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">This e-mail is confidential, may be legally privileged, and is for the intended recipient only. Access, disclosure, copying, distribution or reliance on any of it by
anyone else is prohibited and may be a criminal offence. Please delete or destroy all copies immediately if obtained in error and e-mail confirmation to the sender. Thank you.
</span><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:black;mso-fareast-language:EN-GB">Lightfoot Solutions UK Limited. Registered Office: Richmond House, Oldbury, Bracknell, Berkshire, RG12 8TQ. Registered in England and Wales No. 06988557</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>