<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am getting below error while browsing this URL <a href="http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/Login">
http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/Login</a>. URL changes to (<a href="http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/SAML2/POST">http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/SAML2/POST</a> )<o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">First it try to connect remote metadata provider but connection did not happen then it tries to load my Local copy of metadata file and fail during SAML2/POST operation<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">SAML response reported an IdP error.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Error from identity provider:<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:black">Status:</span></b><span style="color:black"> urn:oasis:names:tc:SAML:2.0:status:Requester<br>
<b>Sub-Status:</b> urn:oasis:names:tc:SAML:2.0:status:RequestDenied<br>
<b>Message:</b> The digital signature of the received SAML2 message is invalid.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Native.log file shows below error:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:32 INFO Shibboleth.DiscoveryFeed : feed files will be cached in C:/opt/shibboleth-sp/var/cache/shibboleth/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 DEBUG Shibboleth.ISAPI [6812] isapi_shib: mapped http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/SAML2/POST to default<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 DEBUG Shibboleth.ISAPI [6812] isapi_shib_extension: mapped http://usphlvm2556.dmzphl.sap.corp:1080/Shibboleth.sso/SAML2/POST to default<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 DEBUG Shibboleth.Listener [6812] isapi_shib_extension: sending message (default/SAML2/POST)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 DEBUG Shibboleth.Listener [6812] isapi_shib_extension: send completed, reading response message<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 ERROR Shibboleth.Listener [6812] isapi_shib_extension: remoted message returned an error: SAML response reported an IdP error.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:33 ERROR Shibboleth.ISAPI [6812] isapi_shib_extension: SAML response reported an IdP error.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">While Shibd.log shows below error:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:32 INFO Shibboleth.Application : building MetadataProvider of type XML...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:32 INFO OpenSAML.Metadata : building MetadataFilter of type Signature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:32 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (C:/opt/shibboleth-sp/etc/shibboleth/accounts400_idp_cert2.pem)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:32 INFO XMLTooling.CredentialResolver.File : no private key resolved, usable for verification/trust only<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: unable to connect socket for URL 'https://accounts400.sap.com/saml2/metadata/accounts.sap.com'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 ERROR OpenSAML.MetadataProvider.XML : error while loading resource (https://accounts400.sap.com/saml2/metadata/accounts.sap.com): XML error(s) during parsing, check log for specifics<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 600 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 WARN OpenSAML.MetadataProvider.XML : trying backup file, exception loading remote resource: XML error(s) during parsing, check log for specifics<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 INFO OpenSAML.MetadataProvider.XML : using local backup of remote resource<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (C:/opt/shibboleth-sp/var/cache/shibboleth/metadata.xml)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 INFO OpenSAML.Metadata : applying metadata filter (Signature)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2016-05-09 05:43:42 INFO Shibboleth.Application : no TrustEngine specified or installed, using default chain {ExplicitKey, PKIX}<o:p></o:p></span></p>
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal">Please help me out in this.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal">Budh Ram<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>