<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have a query while making a shib attribute query request from SP I am passing the public key generated by us and shared with IdP and the signed certificate provided by IdP.<o:p></o:p></p>
<p class="MsoNormal">I am passing the following request:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">RequestURI:<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif";color:#505050;background:#FAFAFA">https://xxxxxx.net/idp/a.ssaml2</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Request Body:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText"><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></p>
<p class="MsoPlainText"><soapenv:Envelope xmlns:soapenv="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"><o:p></o:p></p>
<p class="MsoPlainText"><soapenv:Header><o:p></o:p></p>
<p class="MsoPlainText"></soapenv:Header><o:p></o:p></p>
<p class="MsoPlainText"><soapenv:Body><o:p></o:p></p>
<p class="MsoPlainText"><samlp:AttributeQuery ID="MhSkwDw1t1VbsLbHwI08AQZ" Version="2.0"
<o:p></o:p></p>
<p class="MsoPlainText">IssueInstant="2017-04-20T18:46:30Z" <o:p></o:p></p>
<p class="MsoPlainText">Destination="<a href="https://xxxxx.net/idp/a.ssaml2">https://xxxxx.net/idp/a.ssaml2</a>"
<o:p></o:p></p>
<p class="MsoPlainText">xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
<o:p></o:p></p>
<p class="MsoPlainText">xmlns:SOAP-ENV="<a href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</a>"><o:p></o:p></p>
<p class="MsoPlainText"> <saml:Issuer><a href="https://yyyyyyy.com/%3c/saml:Issuer">https://yyyyyyy.com/</saml:Issuer</a>><o:p></o:p></p>
<p class="MsoPlainText"> <saml:Subject><o:p></o:p></p>
<p class="MsoPlainText"> <saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">MhSkwDt1VwI08pdd3AQZ</saml:NameID><o:p></o:p></p>
<p class="MsoPlainText"> </saml:Subject><o:p></o:p></p>
<p class="MsoPlainText"> <saml:Attribute Name="isValid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"></samlp:AttributeQuery><o:p></o:p></p>
<p class="MsoPlainText"></soapenv:Body><o:p></o:p></p>
<p class="MsoPlainText"></soapenv:Envelope><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The Issuer is SP Entity ID. <o:p></o:p></p>
<p class="MsoNormal">I am getting the response as : <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">401 - "Cert auth credentials must be provided for (SP) :::
<a href="https://yyyyyy.com/"">https://yyyyyy.com/"</a>;<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Do I need to provide some credentials, if yes , then which credentials SP/IDP? Or I am doing something wrong ? Or is there any configuration missing which can cause such error.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Somya<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>