<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yiv6546130902"><div id="yui_3_16_0_1_1445311207222_2647"><div style="background-color: rgb(255, 255, 255);" id="yui_3_16_0_1_1445311207222_2646"><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635"><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">Thank you. I feel a bit dumb. Or old. ;) That was indeed it.</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4683" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">I made a little more progress, and I can now fully authenticate with ldap. I am trying to work on Office 365 integration, but I am getting an "The application you have accessed is not registered for use with this service." error after authentication.</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">In reviewing the list archives, it looks like it has to do with metadata not loaded, but I'm not sure what it really means. My logs show the following:</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4688" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">My metadata.xml is:</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> <MetadataProvider id="MicrosoftOnline"</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> xsi:type="FileBackedHTTPMetadataProvider"</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> backingFile="%{idp.home}/metadata/federationmetadata.xml"</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> metadataURL="https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml"></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> <MetadataFilter xsi:type="EntityRoleWhiteList"></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> <RetainedRole>md:SPSSODescriptor</RetainedRole></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> </MetadataFilter></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""> </MetadataProvider></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4700" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">and I have the metadata in my $idp.home/metadata folder as well.</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4704" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">The metadata gets loaded:</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4708" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:14,790 - DEBUG [org.opensaml.saml.metadata.resolver.impl.HTTPMetadataResolver:225] - Attempting to fetch metadata document from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,476 - DEBUG [org.opensaml.saml.metadata.resolver.impl.HTTPMetadataResolver:343] - Attempting to extract metadata from response to request for metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,481 - DEBUG [org.opensaml.saml.metadata.resolver.impl.HTTPMetadataResolver:245] - Successfully fetched 17977 bytes of metadata from https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,494 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:290] - Processing new metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,495 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:379] - Unmarshalling metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,678 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:423] - Preprocessing metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,679 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:276] - Applying metadata filter</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,680 - DEBUG [org.opensaml.saml.metadata.resolver.filter.impl.MetadataFilterChain:77] - Applying filter org.opensaml.saml.metadata.resolver.filter.impl.EntityRoleFilter</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,682 - DEBUG [org.opensaml.saml.metadata.resolver.filter.impl.MetadataFilterChain:77] - Applying filter org.opensaml.saml.metadata.resolver.filter.impl.NodeProcessingMetadataFilter</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,683 - ERROR [net.shibboleth.idp.saml.metadata.impl.AttributeMappingNodeProcessor:144] - Requested Attributes Mapper: Invalid Attribute resolver configuration.</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,684 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:433] - Releasing cached DOM for metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,700 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:437] - Post-processing metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,702 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:441] - Computing expiration time for metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,752 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:446] - Expiration of metadata from 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml' will occur at 2015-10-20T07:24:14.785Z</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,753 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:465] - New metadata successfully loaded for 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,792 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306] - Next refresh cycle for metadata provider 'https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml' will occur on '2015-10-20T06:24:15.027Z' ('2015-10-20T02:24:15.027-04:00' local time)</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:24:15,796 - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:378] - Service 'shibboleth</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4728" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">but later (when I try to authenticate my user):</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4732" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4735" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,977 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,990 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:334] - Metadata backing store does not contain any EntityDescriptors with the ID: urn:federation:MicrosoftOnline</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,991 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198] - Metadata document did not contain a descriptor for entity urn:federation:MicrosoftOnline</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,991 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281] - Metadata document did not contain any role descriptors of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for entity urn:federation:MicrosoftOnline</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,991 - DEBUG [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252] - Metadata document does not contain a role of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting protocol urn:oasis:names:tc:SAML:2.0:protocol for entity urn:federation:MicrosoftOnline</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,992 - INFO [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108] - Message Handler: No metadata returned for urn:federation:MicrosoftOnline in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol urn:oasis:names:tc:SAML:2.0:protocol</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,997 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler' on INBOUND message context</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,997 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:49,997 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109] - Message Handler: No metadata context found, nothing to do</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:50,014 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer urn:federation:MicrosoftOnline</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:50,019 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284] - Resolving relying party configuration</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:50,019 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290] - Profile request is unverified, returning configuration shibboleth.UnverifiedRelyingParty</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">2015-10-19 23:26:50,020 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration shibboleth.UnverifiedRelyingParty for request</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4751" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4754" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class="">I must be missing some configuration somewhere?</div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" class=""><br id="yui_3_16_0_1_1445311207222_4758" class=""></div><div dir="ltr" id="yiv6546130902yui_3_16_0_1_1445307778721_3635" style="color: rgb(0, 0, 0); font-family: HelveticaNeue-Light, 'Helvetica Neue Light', 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 16px;" class=""><br id="yui_3_16_0_1_1445311207222_4761" class=""></div></div></div></div></div><div class=".yiv6546130902yahoo_quoted" id="yui_3_16_0_1_1445311207222_3761"><div style="font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" id="yui_3_16_0_1_1445311207222_3759"><div class="qtdSeparateBR"><br><br></div><div class="yiv6546130902yqt9152415481" id="yiv6546130902yqtfd40900"> </div></div><div class="yiv6546130902yqt9152415481" id="yiv6546130902yqtfd91211"> </div></div></div></body></html>