<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hey guys,<div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>We are using Shibboleth v4 and have many services running, including incommon, some SAML based services, and some CAS services.</div><div class=""><br class=""></div><div class="">We are trying to configure Apache Guacamole but we are having a hell of a time. It doesn’t have a Meta Data generator, so we generated Metadata itself for it.</div><div class=""><br class=""></div><div class="">When we try to get to the login screen, we get an error presented from our Shibboleth Server:</div><div class=""><br class=""></div><div class="">The application you have accessed is not registered for use with this service.</div><div class=""><br class=""></div><div class="">———</div><div class=""><br class=""></div><div class="">I’m not seeing anything in our logs, nor do I have any idea what URL it’s trying to call or access.</div><div class=""><br class=""></div><div class="">———</div><div class=""><br class=""></div><div class="">This is what we have for the metadata and it loads</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><?xml version="1.0" encoding="UTF-8" standalone="yes"?><EntityDescriptor entityID="<a href="https://ourguacserver.ouruniversity.edu/guacamole" class="">https://ourguacserver.ouruniversity.edu/guacamole</a>" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat><AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://ourguacserver.ouruniversity.edu/guacamole" class="">https://ourguacserver.ouruniversity.edu/guacamole</a>"/></SPSSODescriptor></EntityDescriptor></span></div></div><div class=""><br class=""></div><div class="">In our relying-party.xml we have this</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="https://ourguacserver.ouruniversity.edu/guacamole" class="">https://ourguacserver.ouruniversity.edu/guacamole</a>"></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <property name="profileConfigurations"></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <list></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <bean parent="SAML2.SSO" p:encryptAssertions="false" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </list></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </property></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> </bean></span></div></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class="">And in our attribute-filter.xml we have this: (I tried two different ones)</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><AttributeFilterPolicy id="releaseForGuacTEST" ></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <PolicyRequirementRule xsi:type="RequesterRegex" regex="https:\/\/ourguacserver\.ouruniversity\.edu\/.*" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonScopedAffiliation" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonPrincipalName" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="surname" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="givenName" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="mail" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="uid" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></AttributeFilterPolicy></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9); min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><AttributeFilterPolicy id="releaseForGuacTEST-2" ></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <PolicyRequirementRule xsi:type="Requester" value="<a href="https://ourguacserver.ouruniversity.edu" class="">https://ourguacserver.ouruniversity.edu</a>" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonScopedAffiliation" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="eduPersonPrincipalName" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="surname" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="givenName" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> <AttributeRule attributeID="mail" permitAny="true" /></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.9);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></AttributeFilterPolicy></span></div></span></div><div class=""><br class=""></div><div class="">Any suggestions would be greatly appreciated</div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span><img apple-inline="yes" id="6509CEE9-2510-4CA4-AC29-B4F0392607DA" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu" class=""></span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class="">www.manhattan.edu</span><br class=""><br class=""></div>
</div>
<br class=""></div></body></html>