<div dir="ltr">DOH!<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 11, 2019 at 12:10 PM Christopher Bongaarts <<a href="mailto:cab@umn.edu">cab@umn.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF">
    <div class="gmail-m_4221447337972831199moz-cite-prefix">On 3/11/2019 3:04 PM, IAM David Bantz
      wrote:<br>
    </div>
    <blockquote type="cite">An
      SP apparently successfully relying on our IdP for the last year
      has is now not being recognized by the IdP with the following
      sequence of messages in the IdP-process.log:
      <div><br>
      </div>
      <div><code class="gmail-m_4221447337972831199gmail-xml gmail-m_4221447337972831199gmail-hljs"><span class="gmail-m_4221447337972831199gmail-hljs-tag">metadata in the IdP for this service
            is minimal at best:
          </span></code>
        <div class="gmail-m_4221447337972831199gmail-message-body">
          <pre><code class="gmail-m_4221447337972831199gmail-xml gmail-m_4221447337972831199gmail-hljs"><span class="gmail-m_4221447337972831199gmail-hljs-tag">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span class="gmail-m_4221447337972831199gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">md</span><span class="gmail-m_4221447337972831199gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">EntityDescriptor </span><span class="gmail-m_4221447337972831199gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xmlns</span><span class="gmail-m_4221447337972831199gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-m_4221447337972831199gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">md</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:metadata"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-m_4221447337972831199gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">entityID</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">"<a href="https://sso" target="_blank">https://sso</a>.</span><span class="gmail-m_4221447337972831199gmail-s7" style="font-variant-ligatures:no-common-ligatures;color:rgb(133,0,2);background-color:rgb(224,228,9)">sitei</span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures"><a href="http://mprove.com/auth/Saml2/8341" target="_blank">mprove.com/auth/Saml2/8341</a>"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-m_4221447337972831199gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ID</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">"_a863e4c7-48b7-434a-a9a2-f78de29cc219"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-m_4221447337972831199gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">validUntil</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">"2019-03-09T23:42:46.8211310Z"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span><code class="gmail-m_4221447337972831199gmail-xml gmail-m_4221447337972831199gmail-hljs"><span class="gmail-m_4221447337972831199gmail-hljs-tag">
<p class="gmail-m_4221447337972831199gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(47,180,29)"><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-m_4221447337972831199gmail-Apple-converted-space">        </span></span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span class="gmail-m_4221447337972831199gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">md</span><span class="gmail-m_4221447337972831199gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">SPSSODescriptor </span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">protocolSupportEnumeration</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s8" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-m_4221447337972831199gmail-s6" style="font-variant-ligatures:no-common-ligatures">WantAssertionsSigned</span><span class="gmail-m_4221447337972831199gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-m_4221447337972831199gmail-s8" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"true"</span><span class="gmail-m_4221447337972831199gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p></span></code></blockquote></span></code></pre>
        </div>
      </div>
    </blockquote>
    <p><br>
    </p>
    <p>The "validUntil" in the EntityDescriptor says the metadata has
      been no good since 3/9...<br>
    </p>
    <pre class="gmail-m_4221447337972831199moz-signature" cols="72">-- 
%%  Christopher A. Bongaarts   %%  <a class="gmail-m_4221447337972831199moz-txt-link-abbreviated" href="mailto:cab@umn.edu" target="_blank">cab@umn.edu</a>          %%
%%  OIT - Identity Management  %%  <a class="gmail-m_4221447337972831199moz-txt-link-freetext" href="http://umn.edu/~cab" target="_blank">http://umn.edu/~cab</a>  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%
</pre>
  </div>

</blockquote></div>