<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-GB" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"><div class="WordSection1"><p class="MsoNormal">I have gotten my IDP v 4 on Windows installed. From my website I get redirected to the IDP login, I login and in the IDP logs I am told I was successful in logging in and in the SP logs I am told a new session was created. However, no server variables appear to be getting sent over to the site covered by the SP. </p><p class="MsoNormal"> </p><p class="MsoNormal">Here are example log entries:</p><p class="MsoNormal">IDP</p><p class="MsoNormal">2022-07-19 01:50:11,978 - 192.168.0.241 - INFO [org.ldaptive.auth.Authenticator:291] - Authentication succeeded for dn: cn={USERNAME},ou=users,dc={DOMAIN},dc=com</p><p class="MsoNormal">2022-07-19 01:50:11,979 - 192.168.0.241 - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:163] - Credential Validator ldap: Login by '{USERNAME}' succeeded</p><p class="MsoNormal">2022-07-19 01:50:12,082 - 192.168.0.241 - INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:196] - Profile Action FinalizeAuthentication: Principal {USERNAME} authenticated</p><p class="MsoNormal">2022-07-19 01:50:12,824 - 192.168.0.241 - INFO [Shibboleth-Audit.SSO:283] - 192.168.0.241|2022-07-19T05:49:55.952513100Z|2022-07-19T05:50:12.824587100Z|{USERNAME}|<a href="https://SERVER.DOMAIN.com/shibboleth|_20a8c0dfeded5d513a5b745918d7d84b|password|2022-07-19T05:50:11.984575300Z||AAdzZWNyZXQxSsAEcIp4H7CMeAnwlsZMPKe0D/m4l5/kJ7oym+ZQ9HRN6B70d24bJO6Kj3MOvOGFvicM7lJkYqsNs66Z0GcelKW3qFaG9+d4Ft0TUakoMhSQPiy3/TZ+n+BUbVxSRW/EOqGaken9lWRLPvwak3U=|transient|false|false|AES128-GCM|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||Success||0f15b2d6cac986a462530f8987bfe9d26b6db1d421989b2820153d9a82a8ad3e|Mozilla/5.0">https://SERVER.DOMAIN.com/shibboleth|_20a8c0dfeded5d513a5b745918d7d84b|password|2022-07-19T05:50:11.984575300Z||AAdzZWNyZXQxSsAEcIp4H7CMeAnwlsZMPKe0D/m4l5/kJ7oym+ZQ9HRN6B70d24bJO6Kj3MOvOGFvicM7lJkYqsNs66Z0GcelKW3qFaG9+d4Ft0TUakoMhSQPiy3/TZ+n+BUbVxSRW/EOqGaken9lWRLPvwak3U=|transient|false|false|AES128-GCM|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||Success||0f15b2d6cac986a462530f8987bfe9d26b6db1d421989b2820153d9a82a8ad3e|Mozilla/5.0</a> (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/<a href="http://103.0.0.0">103.0.0.0</a> Safari/537.36</p><p class="MsoNormal"> </p><p class="MsoNormal">Then in the logs come several of the below warnings.</p><p class="MsoNormal">2022-07-19 01:54:57,060 - - WARN [org.ldaptive.pool.BlockingConnectionPool:784] - org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@1a304bf1 failed validation</p><p class="MsoNormal"> </p><p class="MsoNormal">In the SP logs I get the following:</p><p class="MsoNormal">2022-07-19 01:57:16|Shibboleth-TRANSACTION.AuthnRequest|||<a href="https://idp2.DOMAIN.com/idp||||||urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect||||||">https://idp2.DOMAIN.com/idp||||||urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect||||||</a></p><p class="MsoNormal">2022-07-19 01:57:17|Shibboleth-TRANSACTION.Login||_3a26d8595cc9dfd6573e352adb7d033e|<a href="https://SERVER.DOMAIN.com/idp|_c42b02ef868fd1042f809e99e2943e75|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|2022-07-19T01:50:11||AAdzZWNyZXQxR3rg6Ap2AVPSQCcAuYpQr+rWsBVf81feDLYQWwcGY4DiIU+0Dbm6ECRfIaHm0Srq1iAcTmy5AZBxMWDrrCBk+/1AlUFDVUY76W9fnnqR12Ft9t8uzy6XVEWdeEh0gNsJnwaw/C5lag0Ew0PyRQA=|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||urn:oasis:names:tc:SAML:2.0:status:Success|||Mozilla/5.0">https://SERVER.DOMAIN.com/idp|_c42b02ef868fd1042f809e99e2943e75|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|2022-07-19T01:50:11||AAdzZWNyZXQxR3rg6Ap2AVPSQCcAuYpQr+rWsBVf81feDLYQWwcGY4DiIU+0Dbm6ECRfIaHm0Srq1iAcTmy5AZBxMWDrrCBk+/1AlUFDVUY76W9fnnqR12Ft9t8uzy6XVEWdeEh0gNsJnwaw/C5lag0Ew0PyRQA=|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||urn:oasis:names:tc:SAML:2.0:status:Success|||Mozilla/5.0</a> (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/<a href="http://103.0.0.0">103.0.0.0</a> Safari/537.36|IP</p><p class="MsoNormal"> </p><p class="MsoNormal">AND</p><p class="MsoNormal"> </p><p class="MsoNormal">2022-07-19 01:57:17 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_3a26d8595cc9dfd6573e352adb7d033e) IdP (<a href="https://idp2.DOMAIN.com/idp">https://idp2.DOMAIN.com/idp</a>) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (IP)</p><p class="MsoNormal"> </p><p class="MsoNormal">On the website I get the following:</p><p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black">Invalid User login attempt via Shibboleth. No value found in Server Variables for: givenName</span></p><p class="MsoNormal"> </p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB">And if I look at the session it gives me no variables. I do have the <Handler type="Session" Location="/Session" showAttributeValues="true"/> entry in the Shibboleth2.xml file on the SP.</span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB"> </span></p><p class="MsoNormal"><u><span style="font-size:10.0pt;font-family:"Courier New";color:black">Miscellaneous</span></u><span style="font-size:10.0pt;font-family:"Courier New";color:black"></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Session Expiration (barring inactivity):</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> 477 minute(s)</span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Client Address:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> 192.168.0.241</span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">SSO Protocol:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> urn:oasis:names:tc:SAML:2.0:protocol</span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Identity Provider:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> <a href="https://idp2.DOMAIN.com/idp">https://idp2.DOMAIN.com/idp</a></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Authentication Time:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> 2022-07-19T06:17:54.822Z</span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Authentication Context Class:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Courier New";color:black">Authentication Context Decl:</span></b><span style="font-size:10.0pt;font-family:"Courier New";color:black"> (none)</span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black"> </span></p><p class="MsoNormal"><u><span style="font-size:10.0pt;font-family:"Courier New";color:black">Attributes</span></u><span style="font-size:10.0pt;font-family:"Courier New";color:black"></span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB"> </span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB"> </span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB">Any help would be appreciated.</span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB"> </span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB">Cheers,</span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB"> </span></p><p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-GB">Rick</span></p></div></body></html>