<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;
mso-fareast-language:EN-IN;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-IN" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hi Nate,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">We have tried to find the HTTPS traffic details from the IdP server but unable to find this details.
<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><b><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Server Configuration<o:p></o:p></span></u></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">IdP Server – Unix OS and Jetty Server. (Unable to find the Https traffic details. Will the Jetty log will help here?)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">SP Server – Windows R2 2016 and IIS web server<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">How can we find the exact HTTPS traffic / HTTP Request headers for working transaction and for failing transaction from the IdP server?
Can you please provide some help here?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thanks and Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#CD7823">Aseem Keskar</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
</span><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:black">Group Manager – IT</span></b><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F497D">
</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">WNS Global Services (P) Ltd</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> |
</span><u><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://www.wns.com/"><span style="color:#0563C1">www.wns.com</span></a></span></u><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">Gate No 4, Plant 10 / 11 Godrej & Boyce Complex, Pirojshanagar, LBS MargVikhroli (West)</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">, </span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">Mumbai</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">,</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">Maharashtra</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">,</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">IP:</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">67219</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">|</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">Direct:</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">
| </span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">Mobile:</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#4A442A">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#4A442A">+919004427356 | Email :
<a href="mailto:aseem.keskar@wns.com"><span style="color:#0563C1">aseem.keskar@wns.com</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:16.5pt;font-family:"Arial",sans-serif;color:#984806">ONE WNS ONE GOAL</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">
</span><b><span lang="EN-US" style="font-size:16.5pt;font-family:"Arial",sans-serif;color:#CD7823">OUTPERFORM</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="color:#1F497D">
<hr size="2" width="100%" noshade="" style="color:#E36C09" align="center">
</span></div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td width="23" style="width:17.25pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="https://www.facebook.com/wnsglobalservices"><span style="color:#0563C1;text-decoration:none"><img border="0" width="21" height="23" style="width:.2187in;height:.2395in" id="IMG1" src="cid:image011.png@01D5A482.AC6AECD0" alt="cid:image8417a7.PNG@d98c7d79.4987f83e"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="22" style="width:16.5pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="https://plus.google.com/103894804293247801422"><span style="color:#0563C1;text-decoration:none"><img border="0" width="21" height="23" style="width:.2187in;height:.2395in" id="Picture_x0020_3" src="cid:image012.png@01D5A482.AC6AECD0" alt="cid:image8f23ab.PNG@468ef803.44bbb671"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="23" style="width:17.25pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="http://www.linkedin.com/company/wns-global-services"><span style="color:#0563C1;text-decoration:none"><img border="0" width="21" height="23" style="width:.2187in;height:.2395in" id="Picture_x0020_4" src="cid:image013.png@01D5A482.AC6AECD0" alt="cid:image6d5015.PNG@8b84213d.4ea8155c"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="23" style="width:17.25pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="http://twitter.com/wnsholdings"><span style="color:#0563C1;text-decoration:none"><img border="0" width="21" height="23" style="width:.2187in;height:.2395in" id="Picture_x0020_5" src="cid:image014.png@01D5A482.AC6AECD0" alt="cid:image68db3b.PNG@fecf5268.4abca7d9"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="23" style="width:17.25pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><a href="http://www.youtube.com/wnsglobalservices"><span style="color:#0563C1;text-decoration:none"><img border="0" width="23" height="25" style="width:.2395in;height:.2604in" id="Picture_x0020_6" src="cid:image015.png@01D5A482.AC6AECD0" alt="cid:imaged5e489.PNG@d3bf55d8.41922a6d"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
</td>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><sup><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">
</span></sup></b><b><sup><span style="font-family:"Arial",sans-serif;color:black">Connect with WNS </span></sup></b><span style="color:black"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Nate Klingenstein <ndk@signet.id>
<br>
<b>Sent:</b> 16 November 2019 12:01<br>
<b>To:</b> Aseem Keskar <Aseem.Keskar@wns.com><br>
<b>Cc:</b> Chetan Chaudhari <Chetan.Chaudhari@wns.com>; Rupesh Kale <Rupesh.Kale@wns.com>; Nilesh Raut <Nilesh.Raut@wns.com>; users@shibboleth.net; Jyoti Sawant <Jyoti.Sawant@wns.com>; Pravin Ingale <Pravin.Ingale@wns.com><br>
<b>Subject:</b> Re: Error in Shibboleth login from mobile devices<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="1" cellpadding="0" style="background:#FBC669;border:solid black 1.0pt">
<tbody>
<tr>
<td style="border:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><strong><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:red">External Email:</span></strong><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:red"> This email has not originated from WNS. Do not click
on attachment or links/URL unless sender is reliable. Malware/ Viruses can be easily transmitted via email and also lead to a Phishing compromise.</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Pardon me, that should read from the Shibboleth server, e.g. IdP. Either end should be able to display the raw traffic.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Sorry. Internet outage here and I'm ironically bad with phones.<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">On Nov 15, 2019 10:19 PM, Nate Klingenstein <<a href="mailto:ndk@signet.id">ndk@signet.id</a>> wrote:<br>
<br>
<o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Aseem,<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Strictly speaking, that means the IdP was attempting to continue some flow(usually login) but was unable to do so. It's usually the back button, but that's obviously unlikely
here.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">I would like an example of the HTTPS traffic on a working transaction and an example of a failing transaction. All you really know from the the server side is that it's trying
to continue a webflow that is invalid.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">This could be a hard fix, depending on what's happening.<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Take care,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">Nate.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif">On Nov 15, 2019 8:46 PM, Aseem Keskar <<a href="mailto:Aseem.Keskar@wns.com">Aseem.Keskar@wns.com</a>> wrote:<o:p></o:p></span></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p><span style="font-size:10.0pt;font-family:Courier">Hello Team,<br>
<br>
We have implemented Shibboleth SSO login in our mobile application. Our mobile application has been built on IONIC3.<br>
<br>
We are frequently facing issue on Shibboleth login for mobile devices where sometime it redirects to error (find the attached error screenshots) and sometime it works fine without any error. Shibboleth login for mobile device is not working consistently.<br>
<br>
We are facing this issue in iOS device more frequently (this error appears 1 or 2 times out of 4-5 login attempts). For Android device, it is not coming so frequently like iOS (for Android error appears 1 or 2 times out of 14-15 login attempts).<br>
<br>
We found the following error in the log file from IdP server.<br>
<br>
[net.shibboleth.ext.spring.error.ExtendedMappingExceptionResolver:136] - Resolved [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s2' -- perhaps this executing flow has ended or expired?
This could happen if your users are relying on browser history (typically via the back button) that references ended flows.] to ModelAndView: reference to view with name 'error'.
<br>
<br>
Kindly help us to find root cause of this error and provide some solution for the same?<br>
<br>
Thanks and regards,<br>
Aseem Keskar-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span> <o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
</div>
<pre>-- <br><br><o:p></o:p></pre>
<pre>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br><br><o:p></o:p></pre>
<pre>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><o:p></o:p></pre>
</div>
</div>
</div>
</body>
</html>