<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 3/11/2019 3:04 PM, IAM David Bantz
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAJ9XvwF104_n2H-TR7iVT=ZjbZdYj5mESYcB8c2w6Kvum6ChEw@mail.gmail.com">An
SP apparently successfully relying on our IdP for the last year
has is now not being recognized by the IdP with the following
sequence of messages in the IdP-process.log:
<div><br>
</div>
<div><code class="gmail-xml gmail-hljs"><span
class="gmail-hljs-tag">metadata in the IdP for this service
is minimal at best:
</span></code>
<div class="gmail-message-body">
<pre><code class="gmail-xml gmail-hljs"><span class="gmail-hljs-tag">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">md</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">EntityDescriptor </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xmlns</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">md</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:metadata"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">entityID</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">"<a href="https://sso" moz-do-not-send="true">https://sso</a>.</span><span class="gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(133,0,2);background-color:rgb(224,228,9)">sitei</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures"><a href="http://mprove.com/auth/Saml2/8341" moz-do-not-send="true">mprove.com/auth/Saml2/8341</a>"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ID</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">"_a863e4c7-48b7-434a-a9a2-f78de29cc219"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">validUntil</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">"2019-03-09T23:42:46.8211310Z"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span><code class="gmail-xml gmail-hljs"><span class="gmail-hljs-tag">
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(47,180,29)"><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">md</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">SPSSODescriptor </span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">protocolSupportEnumeration</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s8" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures">WantAssertionsSigned</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s8" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"true"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p></span></code></blockquote></span></code></pre>
</div>
</div>
</blockquote>
<p><br>
</p>
<p>The "validUntil" in the EntityDescriptor says the metadata has
been no good since 3/9...<br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>