<div dir="ltr"><div><div>Yes, I'm looking at the ADFS logs and nothing really significant shows up. Just to be clear, on both /adfs and /adfs/ls the only authentication method enabled should be FBA?<br><br></div>Thank you once again for your invaluable help!<br>
<br></div>-Bida<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 14, 2014 at 3:34 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">On 8/14/14, 4:17 AM, "B Da Bahia" <<a href="mailto:bidabahia@gmail.com">bidabahia@gmail.com</a>> wrote:<br>
><br>
>Nevertheless, after enabling FBA and disabling Windows Authentication in<br>
>the IdP IIS (and the SP IIS) I've broken the SSO and don't get the IdP<br>
>login form anymore, but instead this error message:<br>
><br>
>opensaml::FatalProfileException at<br>
>(<a href="https://mySP/Shibboleth.sso/SAML2/POST" target="_blank">https://mySP/Shibboleth.sso/SAML2/POST</a>)<br>
>SAML response reported an IdP error.<br>
>Error from identity provider:<br>
><br>
>Status: urn:oasis:names:tc:SAML:2.0:status:Responder<br>
><br>
>I've tried to troubleshoot it but nothing really alarming seems to popup<br>
>from the logs.<br>
<br>
</div>I assume you're looking at ADFS' logs, because that's who's reporting the<br>
error.<br>
<div class=""><br>
>The app proxy shows a 500 Server error on the following request:<br>
><br>
>POST <a href="https://mySP/Shibboleth.sso/SAML2/POST" target="_blank">https://mySP/Shibboleth.sso/SAML2/POST</a><br>
<br>
</div>Yes, the one you just posted above.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>