<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
code
{mso-style-priority:99;
font-family:"Courier New";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.gmail-m4221447337972831199gmail-hljs-tag
{mso-style-name:gmail-m_4221447337972831199gmail-hljs-tag;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:EN-IE;}
span.gmail-m4221447337972831199gmail-s1
{mso-style-name:gmail-m_4221447337972831199gmail-s1;}
span.gmail-m4221447337972831199gmail-s2
{mso-style-name:gmail-m_4221447337972831199gmail-s2;}
span.gmail-m4221447337972831199gmail-s3
{mso-style-name:gmail-m_4221447337972831199gmail-s3;}
span.gmail-m4221447337972831199gmail-s4
{mso-style-name:gmail-m_4221447337972831199gmail-s4;}
span.gmail-m4221447337972831199gmail-s5
{mso-style-name:gmail-m_4221447337972831199gmail-s5;}
span.gmail-m4221447337972831199gmail-s6
{mso-style-name:gmail-m_4221447337972831199gmail-s6;}
span.gmail-m4221447337972831199gmail-s7
{mso-style-name:gmail-m_4221447337972831199gmail-s7;}
p.gmail-m4221447337972831199gmail-p2, li.gmail-m4221447337972831199gmail-p2, div.gmail-m4221447337972831199gmail-p2
{mso-style-name:gmail-m_4221447337972831199gmail-p2;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.gmail-m4221447337972831199gmail-apple-converted-space
{mso-style-name:gmail-m_4221447337972831199gmail-apple-converted-space;}
span.gmail-m4221447337972831199gmail-s8
{mso-style-name:gmail-m_4221447337972831199gmail-s8;}
span.EmailStyle33
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1614046782;
mso-list-type:hybrid;
mso-list-template-ids:-963481680 1647484896 403243011 403243013 403243009 403243011 403243013 403243009 403243011 403243013;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-IE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">There seems to be something of a second attempt from that provider
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><a href="https://sso2.siteimprove.com/saml2/metadata">https://sso2.siteimprove.com/saml2/metadata</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><span style="mso-list:Ignore">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">They don’t just talk the talk!
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Robert Duncan.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> users [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>IAM David Bantz<br>
<b>Sent:</b> Monday 11 March 2019 20:11<br>
<b>To:</b> Christopher Bongaarts <cab@umn.edu><br>
<b>Cc:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: IdP issue with previously working SP metadata<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">DOH!<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Mon, Mar 11, 2019 at 12:10 PM Christopher Bongaarts <<a href="mailto:cab@umn.edu">cab@umn.edu</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">On 3/11/2019 3:04 PM, IAM David Bantz wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">An SP apparently successfully relying on our IdP for the last year has is now not being recognized by the IdP with the following sequence of messages in the IdP-process.log:
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="gmail-m4221447337972831199gmail-hljs-tag"><span style="font-size:10.0pt;font-family:"Courier New"">metadata in the IdP for this service is minimal at best:
</span></span><o:p></o:p></p>
<div>
<pre><span class="gmail-m4221447337972831199gmail-hljs-tag"><o:p> </o:p></span></pre>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<pre><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB"><</span></span><span class="gmail-m4221447337972831199gmail-s2"><span style="color:#C814C9">md</span></span><span class="gmail-m4221447337972831199gmail-s3"><span style="color:#400BD9">:</span></span><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB">EntityDescriptor </span></span><span class="gmail-m4221447337972831199gmail-s4"><span style="color:#2FB41D">xmlns</span></span><span class="gmail-m4221447337972831199gmail-s3"><span style="color:#400BD9">:</span></span><span class="gmail-m4221447337972831199gmail-s4"><span style="color:#2FB41D">md</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s6">"urn:oasis:names:tc:SAML:2.0:metadata"</span><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB"> </span></span><span class="gmail-m4221447337972831199gmail-s4"><span style="color:#2FB41D">entityID</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s6">"<a href="https://sso" target="_blank">https://sso</a>.</span><span class="gmail-m4221447337972831199gmail-s7"><span style="color:#850002;background:#E0E409">sitei</span></span><span class="gmail-m4221447337972831199gmail-s6"><a href="http://mprove.com/auth/Saml2/8341" target="_blank">mprove.com/auth/Saml2/8341</a>"</span><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB"> </span></span><span class="gmail-m4221447337972831199gmail-s4"><span style="color:#2FB41D">ID</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s6">"_a863e4c7-48b7-434a-a9a2-f78de29cc219"</span><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB"> </span></span><span class="gmail-m4221447337972831199gmail-s4"><span style="color:#2FB41D">validUntil</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s6">"2019-03-09T23:42:46.8211310Z"</span><span class="gmail-m4221447337972831199gmail-s1"><span style="color:#2EAEBB">></span></span><span class="gmail-m4221447337972831199gmail-hljs-tag"><o:p></o:p></span></pre>
<p class="gmail-m4221447337972831199gmail-p2" style="margin:0cm;margin-bottom:.0001pt;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal">
<span class="gmail-m4221447337972831199gmail-apple-converted-space"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">
</span></span><span class="gmail-m4221447337972831199gmail-s1"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2EAEBB"><</span></span><span class="gmail-m4221447337972831199gmail-s2"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#C814C9">md</span></span><span class="gmail-m4221447337972831199gmail-s3"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#400BD9">:</span></span><span class="gmail-m4221447337972831199gmail-s1"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2EAEBB">SPSSODescriptor
</span></span><span class="gmail-m4221447337972831199gmail-s6"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2FB41D">protocolSupportEnumeration</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s8"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#B42419">"urn:oasis:names:tc:SAML:2.0:protocol"</span></span><span class="gmail-m4221447337972831199gmail-s1"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2EAEBB">
</span></span><span class="gmail-m4221447337972831199gmail-s6"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2FB41D">WantAssertionsSigned</span></span><span class="gmail-m4221447337972831199gmail-s5"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:black">=</span></span><span class="gmail-m4221447337972831199gmail-s8"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#B42419">"true"</span></span><span class="gmail-m4221447337972831199gmail-s1"><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2EAEBB">></span></span><span style="font-size:8.5pt;font-family:"Menlo",serif;color:#2FB41D"><o:p></o:p></span></p>
</blockquote>
</div>
</div>
</blockquote>
<p><o:p> </o:p></p>
<p>The "validUntil" in the EntityDescriptor says the metadata has been no good since 3/9...<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>%% Christopher A. Bongaarts %% <a href="mailto:cab@umn.edu" target="_blank">cab@umn.edu</a> %%<o:p></o:p></pre>
<pre>%% OIT - Identity Management %% <a href="http://umn.edu/~cab" target="_blank">http://umn.edu/~cab</a> %%<o:p></o:p></pre>
<pre>%% University of Minnesota %% +1 (612) 625-1809 %%<o:p></o:p></pre>
</div>
</blockquote>
</div>
</div>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<meta name="GENERATOR" content="PageBreeze Free HTML Editor (http://www.pagebreeze.com)">
<title>disclaimer</title>
<hr>
<p style="LINE-HEIGHT: normal; MARGIN: 0cm 0cm 0pt; TEXT-AUTOSPACE: ; mso-pagination: none; mso-layout-grid-align: none" class="MsoNormal">
<span style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 8pt">The information contained and transmitted in this e-mail is confidential information, and is intended only for the named recipient to which it is addressed. The content of this e-mail may not have
been sent with the authority of National College of Ireland. Any views or opinions presented are solely those of the author and do not necessarily represent those of National College of Ireland. If the reader of this message is not the named recipient or a
person responsible for delivering it to the named recipient, you are notified that the review, dissemination, distribution, transmission, printing or copying, forwarding, or any other use of this message or any part of it, including any attachments, is strictly
prohibited. If you have received this communication in error, please delete the e-mail and destroy all record of this communication. Thank you for your assistance.<o:p></o:p></span></p>
<hr>
</body>
</html>