<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
mso-fareast-language:EN-GB;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-GB" link="#0563C1" vlink="#954F72"><div class="WordSection1"><p class="MsoNormal">Hi there</p><p class="MsoNormal"> </p><p class="MsoNormal">I’ve seen this issue reported by others and then resolved by some action at <a href="http://testshib.org">testshib.org</a> so I’m hoping my issue is the same.</p><p class="MsoNormal"> </p><p class="MsoNormal">Some while ago I uploaded SP metadata, entityID <a href="https://www.datum360.com/shibtest">https://www.datum360.com/shibtest</a> and I was happily able to use that – and can still use that today (though interestingly it isn’t listed at <a href="http://www.testshib.org/entities.html">http://www.testshib.org/entities.html</a> )</p><p class="MsoNormal"> </p><p class="MsoNormal">Today I uploaded a new SP metadata file, which is basically similar to the previous one but with a different entityID of <a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a> and a different callback URL – that is listed at <a href="http://www.testshib.org/entities.html">http://www.testshib.org/entities.html</a> but when I try and use it I am getting the error </p><p class="MsoNormal"> </p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.706 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for <a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a></span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.706 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for <a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a>, looking up configuration based on metadata groups.</span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.706 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a>. Using default relying party configuration.</span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.707 - WARN [org.opensaml.saml2.binding.security.SAML2AuthnRequestsSignedRule:81] - SPSSODescriptor role metadata for entityID '<a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a>' could not be resolved</span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.707 - WARN [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:195] - Simple signature validation (with no request-derived credentials) failed</span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.707 - WARN [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:138] - Validation of request simple signature failed for context issuer: <a href="https://dev-sb.acl360.io">https://dev-sb.acl360.io</a></span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">09:42:30.708 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:406] - Message did not meet security requirements</span></p><pre>org.opensaml.ws.security.SecurityPolicyException: Validation of request simple signature failed for context issuer</pre><pre> at org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule.doEvaluate(BaseSAMLSimpleSignatureSecurityPolicyRule.java:139) ~[opensaml-2.6.0.jar:na]</pre><pre> at org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule.evaluate(BaseSAMLSimpleSignatureSecurityPolicyRule.java:103) ~[opensaml-2.6.0.jar:na]</pre><pre> at org.opensaml.ws.security.provider.BasicSecurityPolicy.evaluate(BasicSecurityPolicy.java:51) ~[openws-1.5.0.jar:na]</pre><pre> at org.opensaml.ws.message.decoder.BaseMessageDecoder.processSecurityPolicy(BaseMessageDecoder.java:132) ~[openws-1.5.0.jar:na]</pre><pre> at org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:83) ~[openws-1.5.0.jar:na]</pre><pre> at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70) ~[opensaml-2.6.0.jar:na]</pre><pre> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:386) [shibboleth-identityprovider-2.4.0.jar:na]</pre><pre> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:211) [shibboleth-identityprovider-2.4.0.jar:na]</pre><pre> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:189) [shibboleth-identityprovider-2.4.0.jar:na]</pre><pre> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:90) [shibboleth-identityprovider-2.4.0.jar:na]</pre><pre> at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:83) [shibboleth-common-1.4.0.jar:na]</pre><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""> </span></p><p class="MsoNormal"> </p><p class="MsoNormal">A recent similar report <a href="http://shibboleth.1660669.n2.nabble.com/TestShib-metadata-issues-td7638474.html">http://shibboleth.1660669.n2.nabble.com/TestShib-metadata-issues-td7638474.html</a></p><p class="MsoNormal"> </p><p class="MsoNormal"> </p><p class="MsoNormal"> </p><p class="MsoNormal">Regards</p><p class="MsoNormal">Steve</p></div></body></html>