<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I have a new implementation that is attempting to send authentication requests to the some endpoint presumed at https://idp-co.calstate.edu/idp/profile/SAML2/POST-SimpleSign/SSO. The following, unsurprisingly, occurs.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2017-02-13 12:07:19,167 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: UnableToDecode<o:p></o:p></p>
<p class="MsoNormal">2017-02-13 12:08:34,361 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">There is no signature anyway, so I’ll be chatting with the vendor, but for grins, was Simple-Sign ever implemented for authentication requests?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<pre><b>GET <a href="https://csussotest.questica.com/login.aspx?ReturnUrl=aHR0cHM6Ly9jc3Vzc290ZXN0LnF1ZXN0aWNhLmNvbS9tYWluRGFzaGJvYXJkLmFzcHg%3d">https://csussotest.questica.com/login.aspx?ReturnUrl=aHR0cHM6Ly9jc3Vzc290ZXN0LnF1ZXN0aWNhLmNvbS9tYWluRGFzaGJvYXJkLmFzcHg%3d</a> HTTP/1.1<o:p></o:p></b></pre>
<pre><b>Host</b>: csussotest.questica.com<o:p></o:p></pre>
<pre><b>User-Agent</b>: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0<o:p></o:p></pre>
<pre><b>Accept</b>: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8<o:p></o:p></pre>
<pre><b>Accept-Language</b>: en-US,en;q=0.5<o:p></o:p></pre>
<pre><b>Accept-Encoding</b>: gzip, deflate, br<o:p></o:p></pre>
<pre><b>Referer</b>: <a href="https://csussotest.questica.com/">https://csussotest.questica.com/</a><o:p></o:p></pre>
<pre><b>Cookie</b>: ASP.NET_SessionId=rboczep1uqqoszdcgfiltp4g<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre><b>HTTP/?.? 302 Found<o:p></o:p></b></pre>
<pre><b>Cache-Control</b>: private<o:p></o:p></pre>
<pre><b>Content-Type</b>: text/html; charset=utf-8<o:p></o:p></pre>
<pre><b>Location</b>: <a href="https://idp-co.calstate.edu/idp/profile/SAML2/POST-SimpleSign/SSO?SAMLRequest=lVTbbuIwEP2VyNI%2b5goqxSKsWBClFaVsQq9vxpmAdx07aztA%2bfo6KWy7Uku1T0kmZ2bOOTN2T5OCRyUeVGYtEvhTgTbOruBC49c%2fMaqUwJJoprEgBWhsKE4H11MceQEulTSSSo7e55xOIVqDMkwK5AyOr0MpdFWASkFtGIXbZBqjtTGlxr5PdaW1NJaX17BjlHhUFj6XKyY8osvd9wSM7XireEwmSUAn12fT5%2b4v2rrb06gbPD3MgqkYh%2fWT3M%2fW02K2WaZd83jPq%2bRivCcXV5vHh6vf02K8p5PVt1aGnFHdSJCa2xsTlpUulR4lXBtiwIOsqmO%2bNSFnHPxaYuTPb9KFm7Ki5JCylfDT9AY5Y6koNB7HKLf5gJzLUYx%2bpovOskujENpuOye524Ygc8%2fzbsslrYCQVrY8I3lowXpufWMbeEvXuoJLYZkIE6MoCDtuELlhaxEFODjHUecJOfPDdH4wkTGxOj2X5StI48liMXdrFU2BDctAzSz6fyaCnDtQujHPlkZOv9csBm5Iq%2f4XhXr%2bP%2bjeYUVrEpejueSMPjsDzuV2qMDOIUZGVdB4XBDzucjQC5sIy9y8geJK6BIoyxlkyP%2fb53AKIGvmZVfTwM4cFbyPDbmdSQJ5v%2b6Yg%2fWpWRhMLAZErab53Fpj5VYfVX1Y4avqnx4mimmNs%2bF6QbZSZaf7%2bKdF%2bh9cB%2f0X&RelayState=https://csussotest.questica.com/login.aspx">https://idp-co.calstate.edu/idp/profile/SAML2/POST-SimpleSign/SSO?SAMLRequest=lVTbbuIwEP2VyNI%2b5goqxSKsWBClFaVsQq9vxpmAdx07aztA%2bfo6KWy7Uku1T0kmZ2bOOTN2T5OCRyUeVGYtEvhTgTbOruBC49c%2fMaqUwJJoprEgBWhsKE4H11MceQEulTSSSo7e55xOIVqDMkwK5AyOr0MpdFWASkFtGIXbZBqjtTGlxr5PdaW1NJaX17BjlHhUFj6XKyY8osvd9wSM7XireEwmSUAn12fT5%2b4v2rrb06gbPD3MgqkYh%2fWT3M%2fW02K2WaZd83jPq%2bRivCcXV5vHh6vf02K8p5PVt1aGnFHdSJCa2xsTlpUulR4lXBtiwIOsqmO%2bNSFnHPxaYuTPb9KFm7Ki5JCylfDT9AY5Y6koNB7HKLf5gJzLUYx%2bpovOskujENpuOye524Ygc8%2fzbsslrYCQVrY8I3lowXpufWMbeEvXuoJLYZkIE6MoCDtuELlhaxEFODjHUecJOfPDdH4wkTGxOj2X5StI48liMXdrFU2BDctAzSz6fyaCnDtQujHPlkZOv9csBm5Iq%2f4XhXr%2bP%2bjeYUVrEpejueSMPjsDzuV2qMDOIUZGVdB4XBDzucjQC5sIy9y8geJK6BIoyxlkyP%2fb53AKIGvmZVfTwM4cFbyPDbmdSQJ5v%2b6Yg%2fWpWRhMLAZErab53Fpj5VYfVX1Y4avqnx4mimmNs%2bF6QbZSZaf7%2bKdF%2bh9cB%2f0X&RelayState=https://csussotest.questica.com/login.aspx</a><o:p></o:p></pre>
<pre><b>Server</b>: Microsoft-IIS/8.5<o:p></o:p></pre>
<pre><b>X-AspNet-Version</b>: 4.0.30319<o:p></o:p></pre>
<pre><b>X-Powered-By</b>: ASP.NET<o:p></o:p></pre>
<pre><b>Date</b>: Mon, 13 Feb 2017 20:08:27 GMT<o:p></o:p></pre>
<pre><b>Content-Length</b>: 993<o:p></o:p></pre>
</div>
</body>
</html>