<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 28 Nov 2016, at 20:29, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><blockquote type="cite" class="">A SAML trace provided by the external IDP identified that the problematic<br class="">users had a SAML token that contained an endash character ‘–‘ (Unicode Hex<br class="">'x96') in one of the attributes of the SAML token.<br class=""></blockquote><br class="">I'm not aware of that being an invalid character in the abstract, but the specific encoding used may have been invalid UTF-8.<br class=""></div></div></blockquote><div><br class=""></div><div>If there is a single octet containing 0x96, then that would be an invalid encoding in UTF-8. The leading octet in a UTF-8 encoding MUST NOT have the top two bits set to 10xxxxxx, that combination is reserved for continuation bytes.</div><div><br class=""></div><div>The rule is that a UTF-8 encoding is either a single-octet 0xxxxxxx, or a leading 11xxxxxx followed by some number of continuation 10xxxxxxx.</div><div><br class=""></div><div>I'd guess this is a mislabelled (or unlabelled) single-character encoding like Windows Cp1252 (that has a U+2013 EN DASH in the 0x96 position).</div><div><br class=""></div></div><div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;"><div class=""> -- Ian<br class=""></div><div class=""><span class="Apple-style-span" style="font-size: medium;"><br class=""></span></div></span></div></span><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>