<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p><br>
</p>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
Hello.<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
I successfully setup the Shibboleth IdP and tested general communication with the <a href="https://sp.testshib.org/" target="_blank">https://sp.testshib.org</a> a few months ago. I just recently had the opportunity to restart work on this with a slightly
different version of jetty and have been progressing myself back to where I had left off.<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
I put together a simple servlet for ExternalAuth that communicates with another end point - all of that still works fine. However, when I call the finishExternalAuthentication method I get the following error in my idp-process.log:<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:13,959 - ERROR [org.apache.velocity:96] - ResourceManager : unable to find resource 'status.vm' in any resource loader.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:31,490 - INFO [net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:115] - Profile Action ValidateExternalAuthentication: External authentication succeeded
for user: admin@boomi.com</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:31,722 - WARN [net.shibboleth.idp.session.impl.StorageBackedIdPSession:257] - Skipping update, AuthenticationResult for flow authn/External in session 651327ff95cbb16eec5f87cc6c360d3db681b30de7a0c63e4fa741341c6cf299
not found in storage</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:32,226 - ERROR [org.opensaml.xmlsec.encryption.support.Encrypter:542] - Error encrypting XMLObject</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">java.security.InvalidAlgorithmParameterException: unknown parameter type.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">at org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown Source)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:32,240 - WARN [org.opensaml.saml.saml2.profile.impl.EncryptAssertions:140] - Profile Action EncryptAssertions: Error encrypting assertion</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">org.opensaml.xmlsec.encryption.support.EncryptionException: Error encrypting XMLObject</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">at org.opensaml.xmlsec.encryption.support.Encrypter.encryptElement(Encrypter.java:543)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">Caused by: java.security.InvalidAlgorithmParameterException: unknown parameter type.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">at org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown Source)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">2016-07-06 15:59:32,246 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: UnableToEncrypt<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
Since it is showing up on my local log, I presumed I had simply forgotten to add the JCE Unlimited Strength files to the version of Java this Jetty is running on, but I double checked and they are there. In some of my searching I noticed that similar errors
are caused by multiple metadata files uploaded to the test instance with the same Entity ID; I suspect that I must have done that at some point in the setting up my configuration again. If this is the case, could you remove all of the files with the Entity
ID "https://nericidp.webproxy.boomi.com/idp/shibboleth" (I'll just upload the most recent one and make sure to keep the file name the same). If not, any help/direction in debugging this would be much appreciated!</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
Thanks!<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; margin-top:0px; margin-bottom:0px">
<br>
</div>
<div id="Signature" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px">
<font size="2">Eric Ochlak</font></div>
<p><br>
</p>
<p><br>
</p>
<div id="Signature">
<div class="BodyFragment"><font size="2">
<div class="PlainText">Eric Ochlak<br>
Software Dev Staff Engineer<br>
Dell Boomi (www.boomi.com)<br>
Eric_Ochlak@Dell.com<br>
Dell Boomi 300 Berwyn Park, 801 Cassatt Road, Suite 111 Berwyn, PA 19132</div>
</font></div>
</div>
</body>
</html>