[From nobody Wed Jun  7 09:45:35 2017
From: &quot;Chauhan, Somya (ELS-CON)&quot; &lt;s.chauhan@elsevier.com&gt;
To: Shib Users &lt;users@shibboleth.net&gt;
Subject: Unable to make Shib Attribute Query 
Thread-Topic: Unable to make Shib Attribute Query 
Thread-Index: AdLfdoI1u7bIELGqT++WLWcpDVd/yg==
Date: Wed, 7 Jun 2017 10:12:41 +0000
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Content-Type: multipart/alternative;
 boundary=&quot;_000_7879696867737273786868727965696674766773757769766778667_&quot;
MIME-Version: 1.0

--_000_7879696867737273786868727965696674766773757769766778667_
Content-Type: text/plain; charset=&quot;us-ascii&quot;
Content-Transfer-Encoding: quoted-printable

Hi All,


I have a query while making a shib  attribute query request from SP I am pa=
ssing the public key generated by us and shared with IdP and the signed cer=
tificate provided by IdP.

I am passing the following request:


RequestURI:

https://xxxxxx.net/idp/a.ssaml2


Request Body:


&lt;?xml version=3D&quot;1.0&quot; encoding=3D&quot;UTF-8&quot;?&gt;

&lt;soapenv:Envelope xmlns:soapenv=3D&quot;http://schemas.xmlsoap.org/soap/envelope=
/&quot;&gt;

&lt;soapenv:Header&gt;

&lt;/soapenv:Header&gt;

&lt;soapenv:Body&gt;

&lt;samlp:AttributeQuery ID=3D&quot;MhSkwDw1t1VbsLbHwI08AQZ&quot; Version=3D&quot;2.0&quot;

IssueInstant=3D&quot;2017-04-20T18:46:30Z&quot;

Destination=3D&quot;https://xxxxx.net/idp/a.ssaml2&quot;

xmlns:saml=3D&quot;urn:oasis:names:tc:SAML:2.0:assertion&quot; xmlns:samlp=3D&quot;urn:oas=
is:names:tc:SAML:2.0:protocol&quot;

xmlns:SOAP-ENV=3D&quot;http://schemas.xmlsoap.org/soap/envelope/&quot;&gt;

  &lt;saml:Issuer&gt;https://yyyyyyy.com/&lt;/saml:Issuer&lt;https://yyyyyyy.com/%3c/sa=
ml:Issuer&gt;&gt;

  &lt;saml:Subject&gt;

    &lt;saml:NameID Format=3D&quot;urn:oasis:names:tc:SAML:2.0:nameid-format:persis=
tent&quot;&gt;MhSkwDt1VwI08pdd3AQZ&lt;/saml:NameID&gt;

  &lt;/saml:Subject&gt;

  &lt;saml:Attribute Name=3D&quot;isValid&quot; NameFormat=3D&quot;urn:oasis:names:tc:SAML:2.=
0:attrname-format:uri&quot;/&gt;


&lt;/samlp:AttributeQuery&gt;

&lt;/soapenv:Body&gt;

&lt;/soapenv:Envelope&gt;


The Issuer is SP Entity ID.

I am getting the response as :


401 - &quot;Cert auth credentials must be provided for (SP) ::: https://yyy=
yyy.com/&quot;


Do I need to provide some credentials, if yes , then which credentials SP/I=
DP? Or I am doing something wrong ? Or is there any configuration missing w=
hich can cause such error.


Thanks,

Somya


--_000_7879696867737273786868727965696674766773757769766778667_
Content-Type: text/html; charset=&quot;us-ascii&quot;
Content-Transfer-Encoding: quoted-printable

&lt;html xmlns:v=3D&quot;urn:schemas-microsoft-com:vml&quot; xmlns:o=3D&quot;urn:schemas-micr=
osoft-com:office:office&quot; xmlns:w=3D&quot;urn:schemas-microsoft-com:office:word&quot; =
xmlns:m=3D&quot;http://schemas.microsoft.com/office/2004/12/omml&quot; xmlns=3D&quot;http:=
//www.w3.org/TR/REC-html40&quot;&gt;
&lt;head&gt;
&lt;meta http-equiv=3D&quot;Content-Type&quot; content=3D&quot;text/html; charset=3Dus-ascii&quot;=
&gt;
&lt;meta name=3D&quot;Generator&quot; content=3D&quot;Microsoft Word 14 (filtered medium)&quot;&gt;
&lt;style&gt;&lt;!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:&quot;Plain Text Char&quot;;
	margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;
	color:windowtext;}
span.PlainTextChar
	{mso-style-name:&quot;Plain Text Char&quot;;
	mso-style-priority:99;
	mso-style-link:&quot;Plain Text&quot;;
	font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--&gt;&lt;/style&gt;&lt;!--[if gte mso 9]&gt;&lt;xml&gt;
&lt;o:shapedefaults v:ext=3D&quot;edit&quot; spidmax=3D&quot;1026&quot; /&gt;
&lt;/xml&gt;&lt;![endif]--&gt;&lt;!--[if gte mso 9]&gt;&lt;xml&gt;
&lt;o:shapelayout v:ext=3D&quot;edit&quot;&gt;
&lt;o:idmap v:ext=3D&quot;edit&quot; data=3D&quot;1&quot; /&gt;
&lt;/o:shapelayout&gt;&lt;/xml&gt;&lt;![endif]--&gt;
&lt;/head&gt;
&lt;body lang=3D&quot;EN-US&quot; link=3D&quot;blue&quot; vlink=3D&quot;purple&quot;&gt;
&lt;div class=3D&quot;WordSection1&quot;&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;Hi All,&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;I have a query while making a shib&nbsp; attribute q=
uery request from SP I am passing the public key generated by us and shared=
 with IdP and the signed certificate provided by IdP.&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;I am passing the following request:&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;RequestURI:&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;span style=3D&quot;font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:#505050;background:#FAFAFA&quot;&gt;https=
://xxxxxx.net/idp/a.ssaml2&lt;/span&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;Request Body:&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;?xml version=3D&quot;1.0&quot; encoding=3D&amp;qu=
ot;UTF-8&quot;?&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;soapenv:Envelope xmlns:soapenv=3D&quot;&lt;a hre=
f=3D&quot;http://schemas.xmlsoap.org/soap/envelope/&quot;&gt;http://schemas.xmlsoap.org/=
soap/envelope/&lt;/a&gt;&quot;&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;soapenv:Header&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;/soapenv:Header&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;soapenv:Body&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;samlp:AttributeQuery ID=3D&quot;MhSkwDw1t1Vbs=
LbHwI08AQZ&quot; Version=3D&quot;2.0&quot;
&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;IssueInstant=3D&quot;2017-04-20T18:46:30Z&quot; &lt;=
o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;Destination=3D&quot;&lt;a href=3D&quot;https://xxxxx.net/=
idp/a.ssaml2&quot;&gt;https://xxxxx.net/idp/a.ssaml2&lt;/a&gt;&quot;
&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;xmlns:saml=3D&quot;urn:oasis:names:tc:SAML:2.0:as=
sertion&quot; xmlns:samlp=3D&quot;urn:oasis:names:tc:SAML:2.0:protocol&amp;quot=
;
&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;xmlns:SOAP-ENV=3D&quot;&lt;a href=3D&quot;http://schemas.=
xmlsoap.org/soap/envelope/&quot;&gt;http://schemas.xmlsoap.org/soap/envelope/&lt;/a&gt;&amp;q=
uot;&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&nbsp; &lt;saml:Issuer&gt;&lt;a href=3D&quot;https://yyyy=
yyy.com/%3c/saml:Issuer&quot;&gt;https://yyyyyyy.com/&lt;/saml:Issuer&lt;/a&gt;&gt;&lt;o:p&gt;&lt;=
/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&nbsp; &lt;saml:Subject&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&nbsp;&nbsp;&nbsp; &lt;saml:NameID Format=3D&amp;quot=
;urn:oasis:names:tc:SAML:2.0:nameid-format:persistent&quot;&gt;MhSkwDt1VwI0=
8pdd3AQZ&lt;/saml:NameID&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&nbsp; &lt;/saml:Subject&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&nbsp; &lt;saml:Attribute Name=3D&quot;isValid&amp;qu=
ot; NameFormat=3D&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&amp;quot=
;/&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;/samlp:AttributeQuery&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;/soapenv:Body&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoPlainText&quot;&gt;&lt;/soapenv:Envelope&gt;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;The Issuer is SP Entity ID. &lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;I am getting the response as : &lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;401 - &amp;quot;Cert auth credentials must be provid=
ed for (SP) :::
&lt;a href=3D&quot;https://yyyyyy.com/&amp;quot&quot;&gt;https://yyyyyy.com/&amp;quot&lt;/a&gt;;&lt;=
o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;Do I need to provide some credentials, if yes , then=
 which credentials SP/IDP? Or I am doing something wrong ? Or is there any =
configuration missing which can cause such error.&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;Thanks,&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;Somya&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&nbsp;&lt;o:p&gt;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;p class=3D&quot;MsoNormal&quot;&gt;&lt;o:p&gt;&nbsp;&lt;/o:p&gt;&lt;/p&gt;
&lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;

--_000_7879696867737273786868727965696674766773757769766778667_--
]