<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
We are integrating a new app to our IdP and are having an issue with the SimpleSignature on the Redirect endpoint. </div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
The SP sends an AuthRequest as usual, and in the HTTP request is the SimpleSignature, which is normal and we have other SPs that do this. Our issue is that every time we test, we get<span class="ContentPasted0 ContentPasted1" style="font-size:12pt;margin:0px;background-color:rgb(255, 255, 255)"><span style="margin:0px" class="ContentPasted2"><span class="ContentPasted2"> </span>a
WARN in the IDP process log saying that the "S</span><span style="margin:0px" class="ContentPasted2">imple sign</span><span style="margin:0px" class="ContentPasted2">ature validation (with no request-derived credentials) failed" and then the final error "</span><span style="margin:0px" class="ContentPasted2">Validation
of request simple signature failed for context issuer" and the IdP displays an error message to the user, ending the conversation.</span></span><br class="ContentPasted2">
<span class="ContentPasted0 ContentPasted1" style="font-size:12pt;margin:0px;background-color:rgb(255, 255, 255)"></span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">We've tested various combinations of the AuthRequestSigned=true/false in their metadata, cutting and pasting certificates back and forth, etc. (the standard troubleshooting
that we would normally do). The vendor does not normally test against Shibboleth (they have their own IdP that they support) but they stood up an instance of Shibboleth in a default configuration and made the changes that they have published on their documentation
site to integrate their application with Shibboleth. They cannot replicate the issue in their lab, and they report that they have customers using this product with a Shibboleth IdP.<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1"><br>
</span></span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br>
</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
We have what we would consider a standard out of the box config with only minimal customization (it took us many years even to use a custom template and we stuck with the default template with our logo replacing the default one).</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<span style="background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted3">Does anyone have any other avenues of troubleshooting that we can go down?<span class="ContentPasted3"> </span></span><br>
</div>
<div class="elementToProof">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div></div>
<div></div>
<div></div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div>
<div style="font-size:13px; font-family:Tahoma"><font size="2" face="Tahoma">
<div>
<div>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; line-height:1.2; color:#002a5c; font-size:16px; font-weight:900">
Mark McCoy</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">Manager, Enterprise Collaboration Services<br>
</p>
<br>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; color:#f15a22; font-size:15px; font-weight:900">
The University of Texas at San Antonio</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">University Technology Solutions<br>
</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">One UTSA Circle</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">San Antonio, TX 78249-3209</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px"><strong></strong>210.458.5871</p>
</div>
</div>
</font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>