<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 8/26/15 8:55 AM, Павел Шашко wrote:<br>
</div>
<blockquote
cite="mid:CAFZ0DBSGgq5pw3i563zR0_=onqkp2tzZ6jdHY_vBpjMf1d5F=g@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div>
<div>But after redirect from idp login page back to app I have
error:</div>
<div><span style="font-family:'Helvetica
Neue',Helvetica,Arial,sans-serif;font-size:15px;line-height:19.5px"><font
color="#3d85c6">HTTP Status 401 - Authentication Failed:
Error decoding incoming SAML message</font></span><br>
</div>
<div><span style="font-family:'Helvetica
Neue',Helvetica,Arial,sans-serif;font-size:15px;line-height:19.5px"><font
color="#000000">and in log:</font></span></div>
<div><span style="font-family:'Helvetica
Neue',Helvetica,Arial,sans-serif;font-size:15px;line-height:19.5px"> <font
color="#3d85c6">Cannot localize sender entity by SHA-1
hash from the artifact at
org.springframework.security.saml.websso.ArtifactResolutionProfileBase.resolveArtifact(ArtifactResolutionProfileBase.java:77) </font></span><span
style="font-family:'Helvetica
Neue',Helvetica,Arial,sans-serif;font-size:15px;line-height:19.5px"><font
color="#000000"><br>
</font></span></div>
<div><span style="font-family:'Helvetica
Neue',Helvetica,Arial,sans-serif;font-size:15px;line-height:19.5px"><font
color="#3d85c6"><br>
</font></span></div>
</div>
</div>
</blockquote>
<br>
<br>
One question is: why are you using SAML Artifact binding? That's
not very typical for standard web SSO.<br>
<br>
<br>
<br>
<blockquote
cite="mid:CAFZ0DBSGgq5pw3i563zR0_=onqkp2tzZ6jdHY_vBpjMf1d5F=g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div><font face="Helvetica Neue, Helvetica, Arial, sans-serif"
color="#000000"><span
style="font-size:15px;line-height:19.5px">I understand
that the problem is on the side of
spring-security-saml, but maybe you can tell me where to
find the problem?</span></font><br>
</div>
<div><br>
</div>
<div>full description of my problem on stackoverflow: <a
moz-do-not-send="true"
href="http://stackoverflow.com/questions/32221517/spring-security-saml-cannot-localize-sender-entity-by-sha-1-hash-from-the-artif"><a class="moz-txt-link-freetext" href="http://stackoverflow.com/questions/32221517/spring-security-saml-cannot-localize-sender-entity-by-sha-1-hash-from-the-artif">http://stackoverflow.com/questions/32221517/spring-security-saml-cannot-localize-sender-entity-by-sha-1-hash-from-the-artif</a></a></div>
<div><br>
</div>
<div>similar problem: <a moz-do-not-send="true"
href="http://forum.spring.io/forum/spring-projects/security/saml/723768-http-status-401-authentication-failed-error-decoding-incoming-saml-message">http://forum.spring.io/forum/spring-projects/security/saml/723768-http-status-401-authentication-failed-error-decoding-incoming-saml-message</a><br>
</div>
<div><br>
</div>
</div>
</div>
</blockquote>
<br>
<br>
Well, I'm not familiar with Spring Security's SAML support, but the
2nd forum thread hints at the problem and solution at the end where
it says:<br>
<br>
<br>
<blockquote type="cite">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
Hi,<br>
I solved this problem - it was related with no metadata related
with received id od IdP. After add it this problem has gone.
Infortunately, there was no information about received id of IDP
in logs.<br>
</blockquote>
<br>
<br>
I.e. your SP needs metadata for the IdP.<br>
<br>
<br>
</body>
</html>