<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I am getting the above error in the IdP log processing the <b>
LogoutRequest </b>sent to it by our SP.<o:p></o:p></p>
<p class="MsoNormal">Few variations I tried which did not make a difference.<o:p></o:p></p>
<p class="MsoNormal">Thanks for your help. <o:p></o:p></p>
<p class="MsoNormal">Naru<o:p></o:p></p>
<div style="mso-element:para-border-div;border-top:double windowtext 2.25pt;border-left:none;border-bottom:double windowtext 2.25pt;border-right:none;padding:1.0pt 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in">idp.session.StorageService = shibboleth.StorageService<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">#idp.session.StorageService = shibboleth.ClientPersistentStorageService (tried this as well did not make a difference)<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">idp.session.timeout = PT60M<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">idp.slop.session = PT0S<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">idp.session.trackSPSessions = true<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">idp.session.secondaryServiceIndex = true<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">idp.session.defaultSPlifetime = PT2H<o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"><o:p> </o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"><b>relying-party.xml<o:p></o:p></b></p>
<p class="MsoNormal" style="text-indent:.5in;border:none;padding:0in"><bean parent="RelyingPartyByName" c:relyingPartyIds="https://<SP host>:<SP port>/"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <property name="profileConfigurations"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <list><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <bean parent="SAML2.SSO" p:encryptAssertions="false" p:postAuthenticationFlows="attribute-release" /><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ref bean="SAML2.Logout" /><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ref bean="SAML2.AttributeQuery" /><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ref bean="SAML2.ArtifactResolution" /><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </list><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </property><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </bean><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in">
<o:p></o:p></p>
</div>
<p class="MsoNormal"><b>Sp-metasata.xml<o:p></o:p></b></p>
<div style="mso-element:para-border-div;border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" validUntil="2029-07-12T08:51:55Z" cacheDuration="PT604800S" entityID="https://<SP host>:<SP port>/"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:KeyDescriptor use="signing"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:X509Data><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:X509Certificate> …… </ds:X509Certificate><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </ds:X509Data><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </md:KeyDescriptor><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:KeyDescriptor use="encryption"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:X509Data><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <ds:X509Certificate> …. </ds:X509Certificate><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </ds:X509Data><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </md:KeyDescriptor><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"><i> <!-- <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://<SP host>:<SP port>/Signon/saml2SloRedirect"/>--><o:p></o:p></i></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://<SP host>:<SP port>/Signon/saml2SloPost"/><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://<SP host>:<SP port>/Signon/saml2SsoPost" index="60"/><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"> </md:SPSSODescriptor><o:p></o:p></p>
<p class="MsoNormal" style="border:none;padding:0in"></md:EntityDescriptor><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">DEBUG [org.opensaml.saml.common.messaging.context.SAMLSubjectNameIdentifierContext:162] - Ignoring LogoutRequest, Subject does not require processing<o:p></o:p></p>
<p class="MsoNormal">2019-07-17 19:15:10,849 - 10.120.136.133 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:144] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing<o:p></o:p></p>
<p class="MsoNormal">2019-07-17 19:15:10,865 - 10.120.136.133 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:834] - Performing secondary lookup on service ID https://<SP host>:<SP port>/ and key nmanda4<o:p></o:p></p>
<p class="MsoNormal">2019-07-17 19:15:10,865 - 10.120.136.133 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:856] - Secondary lookup failed on service ID https://<SP host>:<SP port>/ and key nmanda4<o:p></o:p></p>
<p class="MsoNormal">2019-07-17 19:15:10,865 - 10.120.136.133 - INFO [net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest:402] - Profile Action ProcessLogoutRequest: No active session(s) found matching LogoutRequest<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in">I am listing below sections of AuthnRequest(from SP), AuthnResponse(from IdP), LogoutRequest(to IdP) and LogoutResponse(from IdP):<o:p></o:p></p>
</div>
<p class="MsoNormal">samlp:<b>AuthnRequest</b> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
<o:p></o:p></p>
<p class="MsoNormal">xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" <o:p></o:p></p>
<p class="MsoNormal">ID="_fdcc75e859484f469e9a8b73d30de18d7f272938" Version="2.0"
<o:p></o:p></p>
<p class="MsoNormal">IssueInstant="2019-07-17T22:04:27.761Z" <o:p></o:p></p>
<p class="MsoNormal">Destination="https://<Idp host>:8443/idp/profile/SAML2/Redirect/SSO"
<o:p></o:p></p>
<p class="MsoNormal">AssertionConsumerServiceIndex="60"><o:p></o:p></p>
<p class="MsoNormal"><saml:Issuer><a href="https://%3cSP">https://<SP</a> host>:<SP port>/</saml:Issuer><o:p></o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"></samlp:AuthnRequest><o:p></o:p></p>
</div>
<p class="MsoNormal"><saml2p:<b>Response</b> Destination="https://<SP host>:<SP port>/Signon/saml2SsoPost" ID="_e6d44f8582dc118a4f58d625a57574a5" InResponseTo="_c9136f5fc30073528407418ed0fed6315c73bd48" IssueInstant="2019-07-17T22:03:21.549Z" Version="2.0"
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://%3cIdp">https://<Idp</a> host>:<IdP port>/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_e6d44f8582dc118a4f58d625a57574a5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>E/7q6EydZkIOlFeRVhUk9FnzyOU+THqenIbJFnNrvYQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:SignatureValue>……. </ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate> cert data ….</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><o:p></o:p></p>
<p class="MsoNormal"><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><o:p></o:p></p>
<p class="MsoNormal"><saml2:Assertion ID="_189b9bb9bae5af19441957cf0665919b" IssueInstant="2019-07-17T22:03:21.549Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer><a href="https://%3cIdp">https://<Idp</a> host>:<IdP port>/idp/shibboleth</saml2:Issuer><o:p></o:p></p>
<p class="MsoNormal"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference
URI="#_189b9bb9bae5af19441957cf0665919b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>eqGfHSjU8GU7bNQ2AB8vaet2VVIl8sNhzOmQzMKODqA=</ds:DigestValue></ds:Reference></ds:SignedInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:SignatureValue>……… </ds:SignatureValue><o:p></o:p></p>
<p class="MsoNormal"><ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:X509Data><o:p></o:p></p>
<p class="MsoNormal"><ds:X509Certificate> …….</ds:X509Certificate><o:p></o:p></p>
<p class="MsoNormal"></ds:X509Data><o:p></o:p></p>
<p class="MsoNormal"></ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal"></ds:Signature><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><saml2:Subject><saml2:NameID <o:p></o:p></p>
<p class="MsoNormal">Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
<o:p></o:p></p>
<p class="MsoNormal">NameQualifier="https://<IdP host>:<IdP port>/idp/shibboleth"
<o:p></o:p></p>
<p class="MsoNormal">SPNameQualifier="https://<SP host>:<SP port>/" <o:p></o:p></p>
<p class="MsoNormal">xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">DZXGELUVHN5MQTFOGQTKUKZOMCVHI6UD</saml2:NameID><o:p></o:p></p>
<p class="MsoNormal"><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><o:p></o:p></p>
<p class="MsoNormal"><saml2:SubjectConfirmationData Address="10.120.136.133" <o:p>
</o:p></p>
<p class="MsoNormal">InResponseTo="_c9136f5fc30073528407418ed0fed6315c73bd48" <o:p>
</o:p></p>
<p class="MsoNormal">NotOnOrAfter="2019-07-17T22:08:21.596Z" <o:p></o:p></p>
<p class="MsoNormal">Recipient="https:// <SP host>:<SP port>/Signon/saml2SsoPost"/><o:p></o:p></p>
<p class="MsoNormal"></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-07-17T22:03:21.549Z" NotOnOrAfter="2019-07-17T22:08:21.549Z"><o:p></o:p></p>
<p class="MsoNormal"><saml2:AudienceRestriction><saml2:Audience>https:// <SP host>:<SP port>/</saml2:Audience><o:p></o:p></p>
<p class="MsoNormal"></saml2:AudienceRestriction></saml2:Conditions><o:p></o:p></p>
<p class="MsoNormal"><saml2:AuthnStatement AuthnInstant="2019-07-17T22:03:21.455Z"
<o:p></o:p></p>
<p class="MsoNormal">SessionIndex="_b5338de14f09b9671729470b9562b35b"><saml2:SubjectLocality Address="1.2.3.4"/><o:p></o:p></p>
<p class="MsoNormal"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef><o:p></o:p></p>
<p class="MsoNormal"></saml2:AuthnContext><o:p></o:p></p>
<p class="MsoNormal"></saml2:AuthnStatement><o:p></o:p></p>
<p class="MsoNormal"><saml2:AttributeStatement><o:p></o:p></p>
<p class="MsoNormal"><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1"
<o:p></o:p></p>
<p class="MsoNormal">NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><o:p></o:p></p>
<p class="MsoNormal"><saml2:AttributeValue>nmanda4</saml2:AttributeValue></saml2:Attribute><o:p></o:p></p>
<p class="MsoNormal"></saml2:AttributeStatement><o:p></o:p></p>
<p class="MsoNormal"></saml2:Assertion><o:p></o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"></saml2p:Response><o:p></o:p></p>
</div>
<p class="MsoNormal"><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></p>
<p class="MsoNormal"><saml2p:<b>LogoutRequest</b> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
<o:p></o:p></p>
<p class="MsoNormal">Destination="https://<IdP host>:<IdP port>/idp/profile/SAML2/Redirect/SLO"
<o:p></o:p></p>
<p class="MsoNormal">ID="olipijnbmbhmogmhdommbninnkoloibgmlgdlkle" <o:p></o:p></p>
<p class="MsoNormal">IssueInstant="2019-07-18T04:36:25.659Z" <o:p></o:p></p>
<p class="MsoNormal">NotOnOrAfter="2019-07-18T04:41:25.659Z" <o:p></o:p></p>
<p class="MsoNormal">Reason="urn:oasis:names:tc:SAML:2.0:logout:user" <o:p></o:p></p>
<p class="MsoNormal">Version="2.0"><o:p></o:p></p>
<p class="MsoNormal"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://<SP host>:<SP port>/</saml2:Issuer><o:p></o:p></p>
<p class="MsoNormal"><saml2:NameID xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
<o:p></o:p></p>
<p class="MsoNormal">NameQualifier="https://<IDP HOST>:<IDP PORT>/idp/shibboleth">nmanda4</saml2:NameID>
<b><i>{ tested with adding the SP Name Qualifier (<a href="https://%3cSP">https://<SP</a> host>:<SP port>/) as well did not make a difference}</i></b><o:p></o:p></p>
<p class="MsoNormal"><saml2p:SessionIndex>_5db1c6d5e62dded721ecfcec89e227a4</saml2p:SessionIndex><o:p></o:p></p>
<div style="mso-element:para-border-div;border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"></saml2p:LogoutRequest><o:p></o:p></p>
</div>
<p class="MsoNormal"><?xml version="1.0" encoding="UTF-8"?><o:p></o:p></p>
<p class="MsoNormal"><saml2p:LogoutResponse Destination="https://<SP host>:<SP port>/Signon/saml2SloPost"
<o:p></o:p></p>
<p class="MsoNormal">ID="_f72a752f20f60ea3a6d2ab77b7a3e5ca" <o:p></o:p></p>
<p class="MsoNormal">InResponseTo="olipijnbmbhmogmhdommbninnkoloibgmlgdlkle" <o:p>
</o:p></p>
<p class="MsoNormal">IssueInstant="2019-07-18T04:35:00.573Z" V<o:p></o:p></p>
<p class="MsoNormal">ersion="2.0" <o:p></o:p></p>
<p class="MsoNormal">xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><o:p></o:p></p>
<p class="MsoNormal"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://<IDP HOST>:<IDP PORT>/idp/shibboleth</saml2:Issuer><o:p></o:p></p>
<p class="MsoNormal"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><o:p></o:p></p>
<p class="MsoNormal"><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><o:p></o:p></p>
<p class="MsoNormal"><ds:Reference URI="#_f72a752f20f60ea3a6d2ab77b7a3e5ca"><o:p></o:p></p>
<p class="MsoNormal"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><o:p></o:p></p>
<p class="MsoNormal"><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><o:p></o:p></p>
<p class="MsoNormal"><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><o:p></o:p></p>
<p class="MsoNormal"><ds:DigestValue>rrvhmQ5gPb/kFvUzLmWgKmdsS87Q1Z7c77q18EN/KRU=</ds:DigestValue></ds:Reference><o:p></o:p></p>
<p class="MsoNormal"></ds:SignedInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:SignatureValue>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</ds:SignatureValue><o:p></o:p></p>
<p class="MsoNormal"><ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal"><ds:X509Data><ds:X509Certificate> … </ds:X509Certificate></ds:X509Data><o:p></o:p></p>
<p class="MsoNormal"></ds:KeyInfo><o:p></o:p></p>
<p class="MsoNormal"></ds:Signature><o:p></o:p></p>
<p class="MsoNormal"><saml2p:Status><o:p></o:p></p>
<p class="MsoNormal"> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:<b>Requester</b>"><o:p></o:p></p>
<p class="MsoNormal"> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:<b>UnknownPrincipal</b>"/><o:p></o:p></p>
<p class="MsoNormal"> </saml2p:StatusCode><o:p></o:p></p>
<p class="MsoNormal"> <saml2p:StatusMessage><b>An error occurred</b>.</saml2p:StatusMessage><o:p></o:p></p>
<p class="MsoNormal"> </saml2p:Status><o:p></o:p></p>
<p class="MsoNormal"></saml2p:LogoutResponse><o:p></o:p></p>
</div>
=====================================================<br>
<font face="Arial" color="Black" size="2">Please refer to https://northamerica.altran.com/email-disclaimer<br>
for important disclosures regarding this electronic communication.<br>
</font>=====================================================<br>
</body>
</html>