<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello everyone,</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
it's my first time writing to this mailing list, so I hope I'm not messing this up.</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Anyway, I'm seeking advice on a quite specific problem.</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Having an operational Shibboleth SP 3.2.2 installation, we were asked to add a new IdP.</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
We were able to federate the new IdP, but an issue came up with their SamlResponse.</div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
In particular, getting back the SamlResponse from the new IdP, Shibboleth reports to us this error:<i><b> StatusMessage must have TextContent. (xmltooling ValidationException)</b></i></div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<i><b><br>
</b></i></div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Here's the Status section from the failing SamlResponse:<br>
</div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"><saml2p:Status></span><span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);">
<br>
</span></div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"><span> </span><saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Success"></span><span class="cm-line" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"></span><span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"></saml2p:StatusCode></span><span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);">
<span> </span><span> </span><saml2p:StatusMessage/></span><span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"><br>
</span></div>
<div class="elementToProof ContentPasted0" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span class="cm-line ContentPasted1" style="box-sizing: border-box; color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);"></saml2p:Status></span><br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Having a look online I couldn't find any help on my issue, and as far as I have understood StatusMessage is supposed to be a non-nullable simple type.</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
My question is: acknowledging that doing so might not be conforming or 100% compliant to the SAML specs, is there a way to "safely" bypass that check?</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I've tried digging the <span class="ContentPasted2" style="color: rgb(36, 36, 36); font-family: "Cascadia Mono", Consolas, ui-monospace, Menlo, Monaco, monospace; font-size: 14px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); display: inline !important;">
xmltooling</span> docs as it's a ValidationException but I couldn't find anything useful, but I might have missed something so.</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks in advance!<br>
Best regards,</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Simone.<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>