<div dir="ltr">This is the response sent to the SP:<div><br></div><div><pre id="txt"><saml2p:Response Destination="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>"
ID="_d6cf60550650affba554471ff5c19848"
InResponseTo="_7b53d45db57c6b5176e0c245fa860983"
IssueInstant="2016-01-06T15:53:08.544Z"
Version="2.0"
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:xsd="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>"
>
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><a href="http://localhost:8080/saml/2e/shibboleth">http://localhost:8080/saml/2e/shibboleth</a></saml2:Issuer>
<ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>" />
<ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a>" />
<ds:Reference URI="#_d6cf60550650affba554471ff5c19848">
<ds:Transforms>
<ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>" />
<ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>">
<ec:InclusiveNamespaces PrefixList="xsd"
xmlns:ec="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"
/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha512">http://www.w3.org/2001/04/xmlenc#sha512</a>" />
<ds:DigestValue>zz/MXzGmNE08H+0j1JdLEMgfa0LghkP9ftGr+zYWXoiWgVh4nr+vyXP6zONDe1BPZth4SEHiqUk+
FNR0+hvZZg==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
G9KQ5FKHHQRRB5in3/1Qv5Zt1Al5QizCEXr3LHiLQUCrMps+RYHmCnK5SgpXLEF/tPWxKPnAOnpf
dY3h+uJDNwZTD9j8TL+Xs167p4YcVOimYus/3mkMrebIxqstEhdu8ClcNyihirHmQ6JbiaUsJBff
AUJsAOD4tIM9r9znTKYCYJOqqW/0xm+RHqVu4uvroGJK4wfeBGbMLKnRs7cq59xee2cXrzNz2zyh
8PzxlzpQj2NC9nnyHJaA7x1WNqZrZL5r/WUAqpi10jWPXEI5nM342sUWNy6Bx7JFEYO/c1zF3SnC
Dfa4BpK7DP0m1KgIk+C4LcTSfloGqQ5oNiFiOQ==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIC7jCCAdagAwIBAgIVAMitRIDQ/S+pmNiWOrCRMawt0kz0MA0GCSqGSIb3DQEBCwUAMBQxEjAQ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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<saml2p:Status>
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
</saml2p:Status>
<saml2:Assertion ID="_027833a60d09dff2a18540868d93d4f4"
IssueInstant="2016-01-06T15:53:08.544Z"
Version="2.0"
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
>
<saml2:Issuer><a href="http://localhost:8080/saml/2e/shibboleth">http://localhost:8080/saml/2e/shibboleth</a></saml2:Issuer>
<saml2:Subject>
<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
NameQualifier="<a href="http://localhost:8080/saml/2e/shibboleth">http://localhost:8080/saml/2e/shibboleth</a>"
SPNameQualifier="<a href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a>"
>AAdzZWNyZXQxMSJJhBe+HIgXoaaB8i6tZjTQUFBLYfnoUQIi2M3BLhCDSBL/dQy5cp1+SRDYNW5rXGBsq8bG+W7SbrU9xMjcZsfPge9/ySW5En+9Kzv0PfgN0gjrcYN8LSwwydjNmnNv061pdvxQ</saml2:NameID>
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml2:SubjectConfirmationData Address="0:0:0:0:0:0:0:1"
InResponseTo="_7b53d45db57c6b5176e0c245fa860983"
NotOnOrAfter="2016-01-06T15:58:08.628Z"
Recipient="<a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST">https://sp.testshib.org/Shibboleth.sso/SAML2/POST</a>"
/>
</saml2:SubjectConfirmation>
</saml2:Subject>
<saml2:Conditions NotBefore="2016-01-06T15:53:08.544Z"
NotOnOrAfter="2016-01-06T15:58:08.544Z"
>
<saml2:AudienceRestriction>
<saml2:Audience><a href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a></saml2:Audience>
</saml2:AudienceRestriction>
</saml2:Conditions>
<saml2:AuthnStatement AuthnInstant="2016-01-06T15:53:08.300Z"
SessionIndex="_f9c8b4b8492327df3e214179029d4111"
>
<saml2:SubjectLocality Address="0:0:0:0:0:0:0:1" />
<saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="lastname"
Name="lastname"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"
xsi:type="xsd:string"
>Albei</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="firstname"
Name="firstname"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"
xsi:type="xsd:string"
>Bogdan</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="callsign"
Name="callsign"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"
xsi:type="xsd:string"
>gigi3</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
</saml2:Assertion>
</saml2p:Response>
</pre><pre id="txt"><br></pre><pre id="txt">And this is the metadata:</pre><pre id="txt"><table><tbody><tr><td class="" value="1"></td><td class=""><br></td></tr><tr><td class="" value="2"></td><td class=""><span class=""><EntitiesDescriptor <span class="">Name</span>="<span class="">urn:mace:shibboleth:callsign</span>"</span></td></tr><tr><td class="" value="3"></td><td class=""> <span class="">xmlns</span>="<span class="">urn:oasis:names:tc:SAML:2.0:metadata</span>" <span class="">xmlns:ds</span>="<span class=""><a href="http://www.w3.org/2000f/09/xmldsig#">http://www.w3.org/2000f/09/xmldsig#</a></span>"</td></tr><tr><td class="" value="4"></td><td class=""> <span class="">xmlns:mdalg</span>="<span class="">urn:oasis:names:tc:SAML:metadata:algsupport</span>" <span class="">xmlns:mdui</span>="<span class="">urn:oasis:names:tc:SAML:metadata:ui</span>"</td></tr><tr><td class="" value="5"></td><td class=""> <span class="">xmlns:shibmd</span>="<span class="">urn:mace:shibboleth:metadata:1.0</span>" <span class="">xmlns:xsi</span>="<span class=""><a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a></span>"></td></tr><tr><td class="" value="6"></td><td class=""><br></td></tr><tr><td class="" value="7"></td><td class=""> <span class=""><EntityDescriptor <span class="">entityID</span>="<span class=""><a href="http://localhost:8080/saml/2e/shibboleth">http://localhost:8080/saml/2e/shibboleth</a></span>"></span></td></tr><tr><td class="" value="8"></td><td class=""><br></td></tr><tr><td class="" value="9"></td><td class=""> <span class=""><Extensions></span></td></tr><tr><td class="" value="10"></td><td class=""> <span class=""><mdalg:DigestMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#sha512">http://www.w3.org/2001/04/xmlenc#sha512</a></span>" /></span></td></tr><tr><td class="" value="11"></td><td class=""> <span class=""><mdalg:DigestMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmldsig-more#sha384">http://www.w3.org/2001/04/xmldsig-more#sha384</a></span>" /></span></td></tr><tr><td class="" value="12"></td><td class=""> <span class=""><mdalg:DigestMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#sha256">http://www.w3.org/2001/04/xmlenc#sha256</a></span>" /></span></td></tr><tr><td class="" value="13"></td><td class=""> <span class=""><mdalg:SigningMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a></span>" /></span></td></tr><tr><td class="" value="14"></td><td class=""> <span class=""><mdalg:SigningMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384">http://www.w3.org/2001/04/xmldsig-more#rsa-sha384</a></span>" /></span></td></tr><tr><td class="" value="15"></td><td class=""> <span class=""><mdalg:SigningMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a></span>" /></span></td></tr><tr><td class="" value="16"></td><td class=""> <span class=""></Extensions></span></td></tr><tr><td class="" value="17"></td><td class=""><br></td></tr><tr><td class="" value="18"></td><td class=""> <span class=""><IDPSSODescriptor</span></td></tr><tr><td class="" value="19"></td><td class=""> <span class="">protocolSupportEnumeration</span>="<span class="">urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol</span>"></td></tr><tr><td class="" value="20"></td><td class=""> <span class=""><Extensions></span></td></tr><tr><td class="" value="21"></td><td class=""> <span class=""><shibmd:Scope <span class="">regexp</span>="<span class="">false</span>"></span>localhost<span class=""></shibmd:Scope></span></td></tr><tr><td class="" value="22"></td><td class=""> <span class=""><mdui:UIInfo></span></td></tr><tr><td class="" value="23"></td><td class=""> <span class=""><mdui:DisplayName <span class="">xml:lang</span>="<span class="">en</span>"></span>Callsign<span class=""></mdui:DisplayName></span></td></tr><tr><td class="" value="24"></td><td class=""> <span class=""><mdui:Description <span class="">xml:lang</span>="<span class="">en</span>"></span>Callsign IdP<span class=""></mdui:Description></span></td></tr><tr><td class="" value="25"></td><td class=""> <span class=""><mdui:Logo <span class="">height</span>="<span class="">88</span>" <span class="">width</span>="<span class="">253</span>"></span><a href="https://auth.callsign.com/saml/resources/base/images/callsign-logo-full-green.png">https://auth.callsign.com/saml/resources/base/images/callsign-logo-full-green.png</a><span class=""></mdui:Logo></span></td></tr><tr><td class="" value="26"></td><td class=""> <span class=""></mdui:UIInfo></span></td></tr><tr><td class="" value="27"></td><td class=""><br></td></tr><tr><td class="" value="28"></td><td class=""> <span class=""></Extensions></span></td></tr><tr><td class="" value="29"></td><td class=""> <span class=""><KeyDescriptor></span></td></tr><tr><td class="" value="30"></td><td class=""> <span class=""><ds:KeyInfo></span></td></tr><tr><td class="" value="31"></td><td class=""> <span class=""><ds:X509Data></span></td></tr><tr><td class="" value="32"></td><td class=""> <span class=""><ds:X509Certificate></span></td></tr><tr><td class="" value="33"></td><td class=""> MIIC7jCCAdagAwIBAgIVAMitRIDQ/S+pmNiWOrCRMawt0kz0MA0GCSqGSIb3DQEB</td></tr><tr><td class="" value="34"></td><td class=""> CwUAMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDAeFw0xNjAxMDQxMDU3NDBaFw0xOTAx</td></tr><tr><td class="" value="35"></td><td class=""> MDQxMDU3NDBaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB</td></tr><tr><td class="" value="36"></td><td class=""> BQADggEPADCCAQoCggEBAKFp3sHDj1O5jVVNTbzImTSKHsaWIvDH3OrTX9ViuSf+</td></tr><tr><td class="" value="37"></td><td class=""> lXyvqcYQVUQAp70P8kqIaeAlDdpU7bqTfNuDJ9eD/TE1xgZK7KtR5rx/MHEiTcV1</td></tr><tr><td class="" value="38"></td><td class=""> 0XMPgiAem9K5egnDKtElYT6K02pYGMPCBAq+BMmS0IqjA1GuOox999MdV3RseCis</td></tr><tr><td class="" value="39"></td><td class=""> StJlzWSxa0qcKcwAyTODzQ1mTq1/B5ng7E8QZsgUbYLELWnt6TdssmIBGuxCWDI9</td></tr><tr><td class="" value="40"></td><td class=""> Tn2ozo92mJwjXVP0ghF8lfNR6+HRuLm56oEa4U1l54HNdbBixLrE6NReUd/mERzD</td></tr><tr><td class="" value="41"></td><td class=""> KO/pjUI3eCD4aC0JanbSUmzrzrKVvBYZ6hwX1CdQuUUCAwEAAaM3MDUwHQYDVR0O</td></tr><tr><td class="" value="42"></td><td class=""> BBYEFLUMx35bNYzZdQeRraahy1ThLoG8MBQGA1UdEQQNMAuCCWxvY2FsaG9zdDAN</td></tr><tr><td class="" value="43"></td><td class=""> BgkqhkiG9w0BAQsFAAOCAQEAIjOwlHqvxG7RVDgRe0iwv+P4oRaJxHV2WkIfo0z/</td></tr><tr><td class="" value="44"></td><td class=""> Jn+kX+w2HyXfGiJyAFnS/vwcsZR/hGvD1q5EIsqBWFLH2iQXdDXC6o/Q0cXXlLT4</td></tr><tr><td class="" value="45"></td><td class=""> bp1dHJ3yyG5h3wWJbJYO8Br4E2l4T0tvGlHk26OZs0T69ycC9xkKW1zbfCEYSFj8</td></tr><tr><td class="" value="46"></td><td class=""> OL2JYq/KQGQeUWdKtakBjP4sikP6739imAgPkNIfsaJBu2Qd7FjPrrJf1CZD9gFi</td></tr><tr><td class="" value="47"></td><td class=""> eE/VO/hioWObkSsGenMQ37aCkrXgotgkFXqGiUJodHht9Ge///xU0irD6O7zkI68</td></tr><tr><td class="" value="48"></td><td class=""> 96RsmNunf+iSqFIdc7/apc/ytSMz0quyqFLk9s0stMDoEg==</td></tr><tr><td class="" value="49"></td><td class=""> <span class=""></ds:X509Certificate></span></td></tr><tr><td class="" value="50"></td><td class=""> <span class=""></ds:X509Data></span></td></tr><tr><td class="" value="51"></td><td class=""> <span class=""></ds:KeyInfo></span></td></tr><tr><td class="" value="52"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc">http://www.w3.org/2001/04/xmlenc#aes256-cbc</a></span>"/></span></td></tr><tr><td class="" value="53"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc">http://www.w3.org/2001/04/xmlenc#aes192-cbc</a></span>" /></span></td></tr><tr><td class="" value="54"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a></span>"/></span></td></tr><tr><td class="" value="55"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#tripledes-cbc">http://www.w3.org/2001/04/xmlenc#tripledes-cbc</a></span>"/></span></td></tr><tr><td class="" value="56"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</a></span>"/></span></td></tr><tr><td class="" value="57"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#rsa-1_5">http://www.w3.org/2001/04/xmlenc#rsa-1_5</a></span>"/></span></td></tr><tr><td class="" value="58"></td><td class=""> <span class=""></KeyDescriptor></span></td></tr><tr><td class="" value="59"></td><td class=""><br></td></tr><tr><td class="" value="60"></td><td class=""> <span class=""><ArtifactResolutionService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span></td></tr><tr><td class="" value="61"></td><td class=""> <span class="">Location</span>="<span class=""><a href="https://idp.testshib.org:8443/idp/profile/SAML1/SOAP/ArtifactResolution">https://idp.testshib.org:8443/idp/profile/SAML1/SOAP/ArtifactResolution</a></span>"</td></tr><tr><td class="" value="62"></td><td class=""> <span class="">index</span>="<span class="">1</span>"/></td></tr><tr><td class="" value="63"></td><td class=""> <span class=""><ArtifactResolutionService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span></td></tr><tr><td class="" value="64"></td><td class=""> <span class="">Location</span>="<span class=""><a href="https://idp.testshib.org:8443/idp/profile/SAML2/SOAP/ArtifactResolution">https://idp.testshib.org:8443/idp/profile/SAML2/SOAP/ArtifactResolution</a></span>"</td></tr><tr><td class="" value="65"></td><td class=""> <span class="">index</span>="<span class="">2</span>"/></td></tr><tr><td class="" value="66"></td><td class=""><br></td></tr><tr><td class="" value="67"></td><td class=""> <span class=""><NameIDFormat></span>urn:mace:shibboleth:1.0:nameIdentifier<span class=""></NameIDFormat></span></td></tr><tr><td class="" value="68"></td><td class=""> <span class=""><NameIDFormat></span>urn:oasis:names:tc:SAML:2.0:nameid-format:transient<span class=""></NameIDFormat></span></td></tr><tr><td class="" value="69"></td><td class=""><br></td></tr><tr><td class="" value="70"></td><td class=""> <span class=""><SingleSignOnService <span class="">Binding</span>="<span class="">urn:mace:shibboleth:1.0:profiles:AuthnRequest</span>"</span></td></tr><tr><td class="" value="71"></td><td class=""> <span class="">Location</span>="<span class=""><a href="http://localhost:8080/saml/2e/profile/Shibboleth/SSO">http://localhost:8080/saml/2e/profile/Shibboleth/SSO</a></span>"/></td></tr><tr><td class="" value="72"></td><td class=""> <span class=""><SingleSignOnService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span>"</span></td></tr><tr><td class="" value="73"></td><td class=""> <span class="">Location</span>="<span class=""><a href="http://localhost:8080/saml/2e/profile/SAML2/POST/SSO">http://localhost:8080/saml/2e/profile/SAML2/POST/SSO</a></span>"/></td></tr><tr><td class="" value="74"></td><td class=""> <span class=""><SingleSignOnService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</span>"</span></td></tr><tr><td class="" value="75"></td><td class=""> <span class="">Location</span>="<span class=""><a href="http://localhost:8080/saml/2e/profile/SAML2/Redirect/SSO">http://localhost:8080/saml/2e/profile/SAML2/Redirect/SSO</a></span>"/></td></tr><tr><td class="" value="76"></td><td class=""> <span class=""><SingleSignOnService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span></td></tr><tr><td class="" value="77"></td><td class=""> <span class="">Location</span>="<span class=""><a href="http://localhost:8080/saml/2e/profile/SAML2/SOAP/ECP">http://localhost:8080/saml/2e/profile/SAML2/SOAP/ECP</a></span>"/></td></tr><tr><td class="" value="78"></td><td class=""><br></td></tr><tr><td class="" value="79"></td><td class=""> <span class=""></IDPSSODescriptor></span></td></tr><tr><td class="" value="80"></td><td class=""><br></td></tr><tr><td class="" value="81"></td><td class=""><br></td></tr><tr><td class="" value="82"></td><td class=""> <span class=""><AttributeAuthorityDescriptor</span></td></tr><tr><td class="" value="83"></td><td class=""> <span class="">protocolSupportEnumeration</span>="<span class="">urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol</span>"></td></tr><tr><td class="" value="84"></td><td class=""><br></td></tr><tr><td class="" value="85"></td><td class=""> <span class=""><KeyDescriptor></span></td></tr><tr><td class="" value="86"></td><td class=""> <span class=""><ds:KeyInfo></span></td></tr><tr><td class="" value="87"></td><td class=""> <span class=""><ds:X509Data></span></td></tr><tr><td class="" value="88"></td><td class=""> <span class=""><ds:X509Certificate></span></td></tr><tr><td class="" value="89"></td><td class=""> MIIC7jCCAdagAwIBAgIVAMitRIDQ/S+pmNiWOrCRMawt0kz0MA0GCSqGSIb3DQEB</td></tr><tr><td class="" value="90"></td><td class=""> CwUAMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDAeFw0xNjAxMDQxMDU3NDBaFw0xOTAx</td></tr><tr><td class="" value="91"></td><td class=""> MDQxMDU3NDBaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB</td></tr><tr><td class="" value="92"></td><td class=""> BQADggEPADCCAQoCggEBAKFp3sHDj1O5jVVNTbzImTSKHsaWIvDH3OrTX9ViuSf+</td></tr><tr><td class="" value="93"></td><td class=""> lXyvqcYQVUQAp70P8kqIaeAlDdpU7bqTfNuDJ9eD/TE1xgZK7KtR5rx/MHEiTcV1</td></tr><tr><td class="" value="94"></td><td class=""> 0XMPgiAem9K5egnDKtElYT6K02pYGMPCBAq+BMmS0IqjA1GuOox999MdV3RseCis</td></tr><tr><td class="" value="95"></td><td class=""> StJlzWSxa0qcKcwAyTODzQ1mTq1/B5ng7E8QZsgUbYLELWnt6TdssmIBGuxCWDI9</td></tr><tr><td class="" value="96"></td><td class=""> Tn2ozo92mJwjXVP0ghF8lfNR6+HRuLm56oEa4U1l54HNdbBixLrE6NReUd/mERzD</td></tr><tr><td class="" value="97"></td><td class=""> KO/pjUI3eCD4aC0JanbSUmzrzrKVvBYZ6hwX1CdQuUUCAwEAAaM3MDUwHQYDVR0O</td></tr><tr><td class="" value="98"></td><td class=""> BBYEFLUMx35bNYzZdQeRraahy1ThLoG8MBQGA1UdEQQNMAuCCWxvY2FsaG9zdDAN</td></tr><tr><td class="" value="99"></td><td class=""> BgkqhkiG9w0BAQsFAAOCAQEAIjOwlHqvxG7RVDgRe0iwv+P4oRaJxHV2WkIfo0z/</td></tr><tr><td class="" value="100"></td><td class=""> Jn+kX+w2HyXfGiJyAFnS/vwcsZR/hGvD1q5EIsqBWFLH2iQXdDXC6o/Q0cXXlLT4</td></tr><tr><td class="" value="101"></td><td class=""> bp1dHJ3yyG5h3wWJbJYO8Br4E2l4T0tvGlHk26OZs0T69ycC9xkKW1zbfCEYSFj8</td></tr><tr><td class="" value="102"></td><td class=""> OL2JYq/KQGQeUWdKtakBjP4sikP6739imAgPkNIfsaJBu2Qd7FjPrrJf1CZD9gFi</td></tr><tr><td class="" value="103"></td><td class=""> eE/VO/hioWObkSsGenMQ37aCkrXgotgkFXqGiUJodHht9Ge///xU0irD6O7zkI68</td></tr><tr><td class="" value="104"></td><td class=""> 96RsmNunf+iSqFIdc7/apc/ytSMz0quyqFLk9s0stMDoEg==</td></tr><tr><td class="" value="105"></td><td class=""> <span class=""></ds:X509Certificate></span></td></tr><tr><td class="" value="106"></td><td class=""> <span class=""></ds:X509Data></span></td></tr><tr><td class="" value="107"></td><td class=""> <span class=""></ds:KeyInfo></span></td></tr><tr><td class="" value="108"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc">http://www.w3.org/2001/04/xmlenc#aes256-cbc</a></span>"/></span></td></tr><tr><td class="" value="109"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc">http://www.w3.org/2001/04/xmlenc#aes192-cbc</a></span>" /></span></td></tr><tr><td class="" value="110"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a></span>"/></span></td></tr><tr><td class="" value="111"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#tripledes-cbc">http://www.w3.org/2001/04/xmlenc#tripledes-cbc</a></span>"/></span></td></tr><tr><td class="" value="112"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</a></span>"/></span></td></tr><tr><td class="" value="113"></td><td class=""> <span class=""><EncryptionMethod <span class="">Algorithm</span>="<span class=""><a href="http://www.w3.org/2001/04/xmlenc#rsa-1_5">http://www.w3.org/2001/04/xmlenc#rsa-1_5</a></span>"/></span></td></tr><tr><td class="" value="114"></td><td class=""> <span class=""></KeyDescriptor></span></td></tr><tr><td class="" value="115"></td><td class=""><br></td></tr><tr><td class="" value="116"></td><td class=""><br></td></tr><tr><td class="" value="117"></td><td class=""> <span class=""><AttributeService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span></td></tr><tr><td class="" value="118"></td><td class=""> <span class="">Location</span>="<span class=""><a href="https://idp.testshib.org:8443/idp/profile/SAML1/SOAP/AttributeQuery">https://idp.testshib.org:8443/idp/profile/SAML1/SOAP/AttributeQuery</a></span>"/></td></tr><tr><td class="" value="119"></td><td class=""> <span class=""><AttributeService <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span></td></tr><tr><td class="" value="120"></td><td class=""> <span class="">Location</span>="<span class=""><a href="https://idp.testshib.org:8443/idp/profile/SAML2/SOAP/AttributeQuery">https://idp.testshib.org:8443/idp/profile/SAML2/SOAP/AttributeQuery</a></span>"/></td></tr><tr><td class="" value="121"></td><td class=""><br></td></tr><tr><td class="" value="122"></td><td class=""> <span class=""><NameIDFormat></span>urn:mace:shibboleth:1.0:nameIdentifier<span class=""></NameIDFormat></span></td></tr><tr><td class="" value="123"></td><td class=""> <span class=""><NameIDFormat></span>urn:oasis:names:tc:SAML:2.0:nameid-format:transient<span class=""></NameIDFormat></span></td></tr><tr><td class="" value="124"></td><td class=""><br></td></tr><tr><td class="" value="125"></td><td class=""> <span class=""></AttributeAuthorityDescriptor></span></td></tr><tr><td class="" value="126"></td><td class=""><br></td></tr><tr><td class="" value="127"></td><td class=""> <span class=""><Organization></span></td></tr><tr><td class="" value="128"></td><td class=""> <span class=""><OrganizationName <span class="">xml:lang</span>="<span class="">en</span>"></span>Callsign Identity Provider<span class=""></OrganizationName></span></td></tr><tr><td class="" value="129"></td><td class=""> <span class=""><OrganizationDisplayName <span class="">xml:lang</span>="<span class="">en</span>"></span>Callsign<span class=""></OrganizationDisplayName></span></td></tr><tr><td class="" value="130"></td><td class=""> <span class=""><OrganizationURL <span class="">xml:lang</span>="<span class="">en</span>"></span><a href="http://www.callsign.com">http://www.callsign.com</a><span class=""></OrganizationURL></span></td></tr><tr><td class="" value="131"></td><td class=""> <span class=""></Organization></span></td></tr><tr><td class="" value="132"></td><td class=""> <span class=""><!-- <ContactPerson contactType="technical"></span></td></tr><tr><td class="" value="133"></td><td class=""><span class=""> <GivenName>Nate</GivenName></span></td></tr><tr><td class="" value="134"></td><td class=""><span class=""> <SurName>Klingenstein</SurName></span></td></tr><tr><td class="" value="135"></td><td class=""><span class=""> <EmailAddress><a href="mailto:ndk@internet2.edu">ndk@internet2.edu</a></EmailAddress></span></td></tr><tr><td class="" value="136"></td><td class=""><span class=""> </ContactPerson> --></span></td></tr><tr><td class="" value="137"></td><td class=""> <span class=""></EntityDescriptor></span></td></tr><tr><td class="" value="138"></td><td class=""><span class=""></EntitiesDescriptor></span><span class=""></span></td></tr></tbody></table></pre></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 6 January 2016 at 15:48, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Fundamentally, you can't be using default algorithms. Either the encryption algorithm(s) were changed from the defaults, or there has to be SP metadata containing extension elements that are causing it to switch to some algorithm that's triggering a bug.<br>
<br>
We need to see the XML produced by the encryption step before it tries to sign the response. I don't know if that's even possible, so I would switch things and turn off response signing so that it logs the final output it sends to the SP. That might provide a hint about what it's doing that's not routine.<br>
<br>
I would like to see the metadata as well.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><span style="color:rgb(136,136,136)">Bogdan Albei</span><div style="color:rgb(136,136,136)">Senior Platform Engineer</div><div style="color:rgb(136,136,136)">Callsign Inc.</div><div style="color:rgb(136,136,136)">[C] bogdan</div><div><br></div></div></div></div></div></div></div></div></div></div></div>
</div>