<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr">I have an IDP attempting to connect to me on a test Shib box (IIS 7 2.3.1) and they get this error:</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><br></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;" id="yui_3_16_0_1_1440767829872_2641" class="">A valid authentication statement was not found in the incoming message</span><br></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;" class=""><br></span></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;" class="" id="yui_3_16_0_1_1440767829872_2654">Logging on this test box is set to debug.</span></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;" class=""><br></span></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><font color="#222222" face="arial, sans-serif">Looking up the error here:</font></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><font color="#222222" face="arial, sans-serif"><br></font></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTroubleshootingCommonErrors#NativeSPTroubleshootingCommonErrors-opensaml::FatalProfileException:Avalidauthenticationstatementwasnotfoundintheincomingmessage" target="_blank" style="color: rgb(17, 85, 204); font-family: arial, sans-serif; background-color: rgb(255, 255, 255);" id="yui_3_16_0_1_1440767829872_2685" class="">https://wiki.shibboleth.net/<wbr id="yui_3_16_0_1_1440767829872_2687" class="">confluence/display/SHIB2/<wbr id="yui_3_16_0_1_1440767829872_2689" class="">NativeSPTroubleshootingCommonE<wbr id="yui_3_16_0_1_1440767829872_2691" class="">rrors#<wbr id="yui_3_16_0_1_1440767829872_2693" class="">NativeSPTroubleshootingCommonE<wbr id="yui_3_16_0_1_1440767829872_2695" class="">rrors-opensaml::<wbr id="yui_3_16_0_1_1440767829872_2697" class="">FatalProfileException:<wbr id="yui_3_16_0_1_1440767829872_2699" class="">Avalidauthenticationstatementw<wbr id="yui_3_16_0_1_1440767829872_2701" class="">asnotfoundintheincomingmessage</a><font color="#222222" face="arial, sans-serif"><br></font></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><br></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr">It says to check the logs.</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><br></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr">In shibd.log there is this for the transaction (these are the logs immediately following receipt of the assertion):</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr"><br></div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.MessageDecoder.SAML2 [1]: extracting issuer from SAML 2.0 protocol message</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.MessageDecoder.SAML2 [1]: message from (urn:componentspace:SkillsServe)</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.MessageDecoder.SAML2 [1]: searching metadata for message issuer...</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1]: evaluating message flow policy (replay checking on, expiration 60)</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG XMLTooling.StorageService [1]: inserted record (_4291aef7-02e4-4bbc-aa3e-215824860e46) in context (MessageFlow)</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1]: validating signature profile</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG XMLTooling.TrustEngine.ExplicitKey [1]: attempting to validate signature with the peer's credentials</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG XMLTooling.TrustEngine.ExplicitKey [1]: signature validated with credential</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1]: signature verified against message issuer</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG Shibboleth.SSO.SAML2 [1]: processing message against SAML 2.0 SSO profile</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG Shibboleth.SSO.SAML2 [1]: extracting issuer from SAML 2.0 assertion</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1]: evaluating message flow policy (replay checking on, expiration 60)</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG XMLTooling.StorageService [1]: inserted record (_4df65e7e-e5b0-44bf-bf6c-5e6bd73011c3) in context (MessageFlow)</div><div id="yui_3_16_0_1_1440767829872_2591" dir="ltr" class="">2015-08-28 06:12:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1]: assertion satisfied bearer confirmation requirements</div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class=""><br id="yui_3_16_0_1_1440767829872_2769" class=""></div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class="">So, no errors reported there. Moving on to native.log I see this:</div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class=""><br></div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class=""><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class="">2015-08-28 06:12:10 ERROR Shibboleth.Listener [7156] isapi_shib_extension: remoted message returned an error: A valid authentication statement was not found in the incoming message.</div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class="">2015-08-28 06:12:10 ERROR Shibboleth.ISAPI [7156] isapi_shib_extension: A valid authentication statement was not found in the incoming message.</div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2817" class=""><br id="yui_3_16_0_1_1440767829872_2819" class=""></div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2817" class="">Transaction.log is empty.</div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2817" class=""><br></div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2817" class="">Can anyone shed any light on this? I can certainly post the assertion here - just did not want to blast the list with a bunch of data.</div></div><div dir="ltr" id="yui_3_16_0_1_1440767829872_2767" class=""><br></div></div></body></html>