<div dir="ltr">Hi,<div>I am testing for <a href="http://sp.testshib.org">sp.testshib.org</a> with my IdP installation. Getting below error. Please guide me.</div><div><br></div><div><pre style="color:rgb(0,0,0);word-wrap:break-word;white-space:pre-wrap">a3C1UYUnpa00eB/6O2DeA5ctU9lQPP6ZybBpeRY092NFQN4T/UJWzuSlfKOwWWIIgGt5G2lDx9h9
jSQ/oBkOQ9EXnnBO8pZQEzCHoyc9BoYUwL3NVXuUdznAnTJbnPuuQ2Oq8QEhL+MUijMM4+lyxKtE
Z/OK7o4GkCGdZ3I73jaNIYgF++B8Cp0XA9J5gEkiwcHji4XwXaycjBy7K9oCng==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/><saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage></saml2p:Status></saml2p:Response>
2015-11-08 01:13:04 DEBUG OpenSAML.MessageDecoder.SAML2 [1369]: extracting issuer from SAML 2.0 protocol message
2015-11-08 01:13:04 DEBUG OpenSAML.MessageDecoder.SAML2 [1369]: message from (<a href="https://infonet.inflibnet.ac.in/idp/shibboleth">https://infonet.inflibnet.ac.in/idp/shibboleth</a>)
2015-11-08 01:13:04 DEBUG OpenSAML.MessageDecoder.SAML2 [1369]: searching metadata for message issuer...
2015-11-08 01:13:04 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1369]: evaluating message flow policy (replay checking on, expiration 60)
2015-11-08 01:13:04 DEBUG XMLTooling.StorageService [1369]: inserted record (_70f28f760fab4b3eadabc971b4ff937e) in context (MessageFlow) with expiration (1446963427)
2015-11-08 01:13:04 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1369]: validating signature profile
2015-11-08 01:13:04 DEBUG XMLTooling.CredentialCriteria [1369]: keys didn't match
2015-11-08 01:13:04 DEBUG XMLTooling.TrustEngine.ExplicitKey [1369]: attempting to validate signature with the peer's credentials
2015-11-08 01:13:04 DEBUG XMLTooling.TrustEngine.ExplicitKey [1369]: signature validated with credential
2015-11-08 01:13:04 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1369]: signature verified against message issuer
2015-11-08 01:13:04 DEBUG Shibboleth.SSO.SAML2 [1369]: processing message against SAML 2.0 SSO profile
2015-11-08 01:16:25 DEBUG Shibboleth.Listener [1370]: dispatching message (default/TestShib::run::SAML2SI)
2015-11-08 01:16:25 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1370]: validating input
2015-11-08 01:16:25 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1370]: marshalling, deflating, base64-encoding the message
2015-11-08 01:16:25 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1370]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>" Destination="<a href="https://infonet.inflibnet.ac.in/idp/profile/SAML2/Redirect/SSO">https://infonet.inflibnet.ac.in/idp/profile/SAML2/Redirect/SSO</a>" ID="_d06fdd86aead614a681afef05b6d8c2d" IssueInstant="2015-11-08T06:16:25Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a></saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2015-11-08 01:16:25 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1370]: message encoded, sending redirect to client
2015-11-08 01:17:28 DEBUG Shibboleth.Listener [1374]: dispatching message (default/SAML2/POST)
2015-11-08 01:17:28 DEBUG OpenSAML.MessageDecoder.SAML2POST [1374]: validating input
2015-11-08 01:17:28 DEBUG OpenSAML.MessageDecoder.SAML2POST [1374]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>" ID="_c4343ce1c23d77c499e457cc51620d75" InResponseTo="_d06fdd86aead614a681afef05b6d8c2d" IssueInstant="2015-11-08T06:17:31.080Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://infonet.inflibnet.ac.in/idp/shibboleth">https://infonet.inflibnet.ac.in/idp/shibboleth</a></saml2:Issuer><ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/><ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a>"/><ds:Reference URI="#_c4343ce1c23d77c499e457cc51620d75"><ds:Transforms><ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/><ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></ds:Transforms><ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha512">http://www.w3.org/2001/04/xmlenc#sha512</a>"/><ds:DigestValue>sq1gIomkGB59aOVnT1MzqLQeKKScxlHNoMbt9m5Uh21KiiKxCphfxojzpiu2/wKxlHRLyeNE9o+OwQUjyeGoyw==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SFFKpWxGvmAcGBv0BTkmlQPW4YEdep2C8qUUDS9PHG/HbmemygzPCTRaW62cYymD5WvROanS33rUEPFKSgaNZpLyxTU53yIVND4OfYKtAQCeycNG861rpRQIt6toUNsj4W6KMvPhyUwKYgbcOHOD/KLppogGgLvl38WZvKO7B+WhSXNcb1G21ie7dbJpTgx8cBsirmH0s2BZY8Ko+NCUl01EGr8T7tzdyeIvbwk6h3Vwmu+deRsrlDchWCRCggq7lSmxofv50ZrerE+6TAmpq/Dos2Y95i9tSyidHf/QcpGTLDgO1YiHwNpUiJL6jJrdotrbIY95WqZFleq561C9/A==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDSDCCAjCgAwIBAgIVAO4T2siWohDjWjO/74yQTR85BYTmMA0GCSqGSIb3DQEBCwUAMCIxIDAe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==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/><saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage></saml2p:Status></saml2p:Response>
2015-11-08 01:17:28 DEBUG OpenSAML.MessageDecoder.SAML2 [1374]: extracting issuer from SAML 2.0 protocol message
2015-11-08 01:17:28 DEBUG OpenSAML.MessageDecoder.SAML2 [1374]: message from (<a href="https://infonet.inflibnet.ac.in/idp/shibboleth">https://infonet.inflibnet.ac.in/idp/shibboleth</a>)
2015-11-08 01:17:28 DEBUG OpenSAML.MessageDecoder.SAML2 [1374]: searching metadata for message issuer...
2015-11-08 01:17:28 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1374]: evaluating message flow policy (replay checking on, expiration 60)
2015-11-08 01:17:28 DEBUG XMLTooling.StorageService [1374]: inserted record (_c4343ce1c23d77c499e457cc51620d75) in context (MessageFlow) with expiration (1446963691)
2015-11-08 01:17:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1374]: validating signature profile
2015-11-08 01:17:28 DEBUG XMLTooling.CredentialCriteria [1374]: keys didn't match
2015-11-08 01:17:28 DEBUG XMLTooling.TrustEngine.ExplicitKey [1374]: attempting to validate signature with the peer's credentials
2015-11-08 01:17:28 DEBUG XMLTooling.TrustEngine.ExplicitKey [1374]: signature validated with credential
2015-11-08 01:17:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1374]: signature verified against message issuer
2015-11-08 01:17:28 DEBUG Shibboleth.SSO.SAML2 [1374]: processing message against SAML 2.0 SSO profile</pre></div><div><br></div><div><br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br></div><div>Thanks,</div><div dir="ltr">Raja V<div><br></div></div></div></div></div></div></div></div>
</div></div>