<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
Instead of "success" status after sending request to Shibboleth IdP, we're seeing the following error: The status code of the Response was not Success, was Responder -> Error occurred<br>
</p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
<br>
</p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
Looking at logs from the IdP, this is what we're seeing:<br>
</p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
<br>
-Profile Action ProcessRequestedAuthnContext: Incoming RequestedAuthnContext disallowed by profile configuration</p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
-A non-proceed event occurred while processing the request: InvalidAuthenticationContext|<wbr></p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
-Error event InvalidAuthenticationContext will be handled with response</p>
<p style="margin:0px; color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif; font-size:small; background-color:rgb(255,255,255)">
<br>
</p>
<div style="margin: 0px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif, serif, EmojiFont; font-size: small; background-color: rgb(255, 255, 255)">
We're using the Onelogin Python SAML Library (), and our AuthnContext looks like this<br>
<span> <samlp:RequestedAuthnContext Comparison="exact"><br>
</span>
<div> <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef><br>
</div>
<span> </samlp:RequestedAuthnContext></span></div>
<div style="margin: 0px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif, serif, EmojiFont; font-size: small; background-color: rgb(255, 255, 255)">
This matches the configuration the IdP side as well. Are there any other settings I should be checking?
</div>
<br>
</div>
</body>
</html>