<div dir="ltr">Hello,<div> We are trying to get our SSO setup with Azure and are running into some issues. I believe we are very close but I'm not sure how to resolve the final error messages. We are running IDP 4.1.4 in this instance. I have been following the documentation at <a href="https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1401782516/Office+365">https://shibboleth.atlassian.net/wiki/spaces/KB/pages/1401782516/Office+365</a></div><div><br></div><div>My configurations are as follows:</div><div><br></div><div>Attribute-resolver.xml:</div><div>The 2 attributes we are working with.</div><div><br></div><div>
<p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeDefinition </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"Simple"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"ImmutableID"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xmlns</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"urn:mace:shibboleth:2.0:resolver:ad"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> ></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><InputDataConnector </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ref</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"activeDirectory"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeNames</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures">"objectGUID"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)">
</p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><AttributeDefinition </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"Simple"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"UserID"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo"><span class="gmail-s1" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures"> <InputDataConnector </span><span class="gmail-s2" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">ref</span><span class="gmail-s3" style="color:rgb(0,0,0);font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures"><font color="#b42419">"activeDirectory"</font><font color="#2eaebb"> </font></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo"><span class="gmail-s2" style="color:rgb(47,180,29);font-variant-ligatures:no-common-ligatures">attributeNames</span><span class="gmail-s3" style="color:rgb(0,0,0);font-variant-ligatures:no-common-ligatures">=</span><span class="gmail-s4" style="color:rgb(180,36,25);font-variant-ligatures:no-common-ligatures">"userPrincipalName"</span><span class="gmail-s1" style="color:rgb(46,174,187);font-variant-ligatures:no-common-ligatures">/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"SAML2String"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">encodeType</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures">"false"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span>/></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><!-- Active Directory Connector --></span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><DataConnector </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"activeDirectory"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"LDAPDirectory"</span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ldapURL</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"%{idp.authn.adLDAP.ldapURL}"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">baseDN</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"%{idp.authn.adLDAP.baseDN}"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">principal</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"%{idp.authn.adLDAP.bindDN}"</span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">principalCredential</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"%{idp.authn.adLDAP.bindDNCredential}"</span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">trustFile</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"%{idp.authn.adLDAP.trustCertificates}"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><LDAPProperty </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"java.naming.ldap.attributes.binary"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">value</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"objectGUID"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><FilterTemplate></span></p><p class="gmail-p4" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)"><![</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(193,101,28)">CDATA</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">[</span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>sAMAccountName=$resolutionContext.getPrincipal()</span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">]]></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></FilterTemplate></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></DataConnector></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-variant-ligatures:normal">relying-party.xml:</span></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><!--Microsoft Azure required for O365 --></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"RelyingPartyByName"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">c</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">relyingPartyIds</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:federation:MicrosoftOnline"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> ></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><property </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"profileConfigurations"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p><p class="gmail-p4" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><list></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"SAML2.ECP"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">encryptAssertions</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"false"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">signAssertions</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"true"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">signResponses</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"false"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">nameIDFormatPrecedence</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p><p class="gmail-p5" style="margin:0px;font:11px Menlo;color:rgb(47,180,29)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">parent</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"SAML2.SSO"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">encryptAssertions</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"false"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">signAssertions</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"true"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">signResponses</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"false"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p><p class="gmail-p4" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></list></span></p><p class="gmail-p4" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></property></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></bean></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-variant-ligatures:normal">saml-nameid.xml:</span></span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(64,11,217)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><!-- Microsoft requires a custom Persistent ID Generator that sends the AD GUID --></span></p><p class="gmail-p2" style="margin:0px;font:11px Menlo;color:rgb(0,0,0);min-height:13px"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></span><br></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"shibboleth.SAML2AttributeSourcedGenerator"</span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">format</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeSourceIds</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"#{ {'ImmutableID'} }"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> ></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><property </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"activationCondition"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></p><p class="gmail-p3" style="margin:0px;font:11px Menlo;color:rgb(180,36,25)"><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"shibboleth.Conditions.RelyingPartyId"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">c</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">candidates</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"#{{'urn:federation:MicrosoftOnline'}}"</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p><p class="gmail-p4" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></property></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></bean></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><font color="#000000"><span style="font-variant-ligatures:no-common-ligatures">Below is the error message I get in the idp.process.log. I know it is referencing the ImmutableID in the attribute-resolver.xml file. I think the issue is the namespace but all my attempts have failed.</span></font></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><font color="#000000"><span style="font-variant-ligatures:no-common-ligatures"><br></span></font></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><font color="#000000"><span style="font-variant-ligatures:no-common-ligatures"><br></span></font></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:182] - Service 'shibboleth.AttributeRegistryService': Initial load failed</span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 302 in XML document from file [/opt/shibboleth-idp/conf/attribute-resolver.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 302; columnNumber: 106; cvc-complex-type.2.4.a: Invalid content was found starting with element '{"urn:mace:shibboleth:2.0:resolver:ad":AttributeDefinition}'. One of '{"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector}' is expected.</span></p><p class="gmail-p1" style="margin:0px;font:11px Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)</span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 302 in XML document from file [/opt/shibboleth-idp/conf/attribute-resolver.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 302; columnNumber: 106; cvc-complex-type.2.4.a: Invalid content was found starting with element '{"urn:mace:shibboleth:2.0:resolver:ad":AttributeDefinition}'. One of '{"urn:mace:shibboleth:2.0:resolver":AttributeDefinition, "urn:mace:shibboleth:2.0:resolver":DataConnector}' is expected.</span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><br></p><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">Steve Herrera</font></span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1"><br>Information Security<br></font></span><br><u><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:blue"></span></u></p></div></div></div></div></div>