<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Gill Sans MT";
panose-1:2 11 5 2 2 1 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Uggh, I think I am close, but am still getting the same error from NetPartner: “Your login failed. We could not validate your User Name.”<o:p></o:p></p>
<p class="MsoNormal">Any new ideas?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here is a recap: Here is what I have for Shib:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Your assistance is greatly appreciated!!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- metadata ---<o:p></o:p></p>
<p class="MsoNormal"><EntityDescriptor entityID="NetPartner"<o:p></o:p></p>
<p class="MsoNormal"> xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><o:p></o:p></p>
<p class="MsoNormal"> <SPSSODescriptor<o:p></o:p></p>
<p class="MsoNormal"> protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol<o:p></o:p></p>
<p class="MsoNormal"> urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol"><o:p></o:p></p>
<p class="MsoNormal"> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat><o:p></o:p></p>
<p class="MsoNormal"> <AssertionConsumerService index="1"<o:p></o:p></p>
<p class="MsoNormal"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<o:p></o:p></p>
<p class="MsoNormal"> Location="https://myfapprd.taylor.edu/NetPartnerStudent/Logon.aspx"/><o:p></o:p></p>
<p class="MsoNormal"> </SPSSODescriptor><o:p></o:p></p>
<p class="MsoNormal"></EntityDescriptor><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- attribute-resolver.xml ---<o:p></o:p></p>
<p class="MsoNormal"> <resolver:AttributeDefinition xsi:type="Simple" id="netPartnerStudentID" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="SpriIdAlias"><o:p></o:p></p>
<p class="MsoNormal"> <resolver:Dependency ref="mySIS2" /><o:p></o:p></p>
<p class="MsoNormal"> <resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /><o:p></o:p></p>
<p class="MsoNormal"> <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" /><o:p></o:p></p>
<p class="MsoNormal"> </resolver:AttributeDefinition><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <resolver:AttributeDefinition xsi:type="ad:TransientId" id="transientId"><o:p></o:p></p>
<p class="MsoNormal"> <resolver:AttributeEncoder xsi:type="enc:SAML1StringNameIdentifier" nameFormat="urn:mace:shibboleth:1.0:nameIdentifier" /><o:p></o:p></p>
<p class="MsoNormal"> <resolver:AttributeEncoder xsi:type="enc:SAML2StringNameID" nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" /><o:p></o:p></p>
<p class="MsoNormal"> </resolver:AttributeDefinition><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- attribute-filter.xml ---<o:p></o:p></p>
<p class="MsoNormal"> <AttributeFilterPolicy id="releaseForNetPartnerSP"><o:p></o:p></p>
<p class="MsoNormal"> <PolicyRequirementRule xsi:type="Requester" value="NetPartner" /><o:p></o:p></p>
<p class="MsoNormal"> <AttributeRule attributeID="netPartnerStudentID"><o:p></o:p></p>
<p class="MsoNormal"> <PermitValueRule xsi:type="ANY"/><o:p></o:p></p>
<p class="MsoNormal"> </AttributeRule><o:p></o:p></p>
<p class="MsoNormal"> </AttributeFilterPolicy><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- relying-party.xml ---<o:p></o:p></p>
<p class="MsoNormal"> <bean parent="RelyingPartyByName" c:relyingPartyIds="NetPartner"><o:p></o:p></p>
<p class="MsoNormal"> <property name="profileConfigurations"><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="Shibboleth.SSO" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML1.AttributeQuery" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML1.ArtifactResolution" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML2.ECP" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML2.Logout" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML2.AttributeQuery" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML2.ArtifactResolution" p:securityConfiguration-ref="SHA1SecurityConfig" /><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="SAML2.SSO"<o:p></o:p></p>
<p class="MsoNormal"> p:encryptAssertions="false"<o:p></o:p></p>
<p class="MsoNormal"> p:securityConfiguration-ref="SHA1SecurityConfig"<o:p></o:p></p>
<p class="MsoNormal"> /><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </property><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- saml-nameid.xml ---<o:p></o:p></p>
<p class="MsoNormal"> <bean parent="shibboleth.SAML2AttributeSourcedGenerator"<o:p></o:p></p>
<p class="MsoNormal"> p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"<o:p></o:p></p>
<p class="MsoNormal"> p:attributeSourceIds="#{ {'netPartnerStudentID'} }"<o:p></o:p></p>
<p class="MsoNormal"> ><o:p></o:p></p>
<p class="MsoNormal"> <property name="activationCondition"><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="shibboleth.Conditions.RelyingPartyId"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg name="candidates"><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <value>NetPartner</value><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"> </property><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The Shibboleth idp-process.log file shows (with debug turned on) that the attribute netPartnerStudentID has a value of @12345678 (numerical value reported here is modified for security), and is released to NetPartner.<o:p></o:p></p>
<p class="MsoNormal">In NetPartner, the same value is set for both the Alternate ID and Web ID for a test student to @12345678. When NetPartner is configured for regular login, I can log in for that user. But when I set NetPartner for SAML Single Sign on,
I get the error above.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Gill Sans MT",sans-serif;color:#1F497D">Carl R. Daudt</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1F497D">Enterprise Applications Systems Analyst, Information Technology</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1F497D">Taylor University
<br>
236 W. Reade Avenue <br>
Upland, IN 46989 <br>
Office: 765-998-5313</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif;color:#1F497D"><a href="mailto:crdaudt@taylor.edu"><span style="color:blue">crdaudt@taylor.edu</span></a></span><span style="font-size:10.0pt;font-family:"Gill Sans MT",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<br>
<font face="Gill Sans Regular, Gill Sans MT, Trebuchet MS, Helvetica" color="888888" size="2">The information in this communication is intended solely for the individual or entity to whom it is addressed. It may contain confidential or legally privileged information.
If you are not the intended recipient, any disclosure, copying, distribution or reliance on the contents of this information is strictly prohibited, and may be unlawful. If you have received this communication in error, please notify us immediately by responding
to the sender of this email, and then delete it from your system. Taylor University is not liable for the inaccurate or improper transmission of the information contained in this communication or for any delay in its receipt.</font>
</body>
</html>