<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Scott</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks for the signpost. I have added the following to relying-party.xml:</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <!--365: stop RequesterID errors on Azure side--> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <bean parent="RelyingPartyByName" c:relyingPartyIds="medialoans.yorksj.ac.uk"></span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <property name="profileConfigurations"></span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <list></span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <bean parent="SAML2.SSO" p:ignoreScoping="true" /></span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </list></span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </property></span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> </bean></span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">But it hasn't worked. According to my debug (all levels) log file, it is showing as
catching the need to do something - but not that it should actually do anything:</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43067: 2024-03-04 15:14:09,782 - 10.4.105.22 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:131]
- Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer medialoans.yorksj.ac.uk</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43071: 2024-03-04 15:14:09,782 - 10.4.105.22 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:265]
- Checking if relying party configuration EntityNames[medialoans.yorksj.ac.uk,] is applicable</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43072: 2024-03-04 15:14:09,782 - 10.4.105.22 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:267]
- Relying party configuration EntityNames[medialoans.yorksj.ac.uk,] is applicable</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43073: 2024-03-04 15:14:09,782 - 10.4.105.22 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:174]
- Profile Action SelectRelyingPartyConfiguration: Found relying party configuration EntityNames[medialoans.yorksj.ac.uk,] for request</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43094: 2024-03-04 15:14:09,922 - 10.4.105.22 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:452]
- Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location https://medialoans.yorksj.ac.uk/SAML/AssertionConsumerService using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43129: 2024-03-04 15:14:10,328 - 10.4.105.22 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:265]
- Checking if relying party configuration EntityNames[medialoans.yorksj.ac.uk,] is applicable</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Line 43130: 2024-03-04 15:14:10,328 - 10.4.105.22 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:270]
- Relying party configuration EntityNames[medialoans.yorksj.ac.uk,] is not applicable</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I can't find an obvious what I'm doing wrong here (and I know it was trying to look
at it before, as my first attempt was ignoreScorping and it suggested I meant ignoreScoping.</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I think, from my reading, that's the right way of doing this?</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I have however flagged with the supplier, that there is technically a bug in their SAML
engine - no idea if they'll listen or not (if anyone from Lorensberg is on this list, please listen!).</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Thanks<br>
Dave</span></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt;">_________________________________________________</span></div>
<table style="border-collapse: collapse; border-spacing: 0px; box-sizing: border-box;">
<tbody>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 96.45pt;">
<p style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);"><b>Dave Perry</b></span><span style="font-family: "Times New Roman", serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span><span style="font-family: Arial, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">Application Analyst
<b>| </b>Innovation & Technology Services<br>
<br>
York St John University </span></p>
<p style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">Lord Mayor’s Walk, York, YO31 7EX<br>
T: +44(0)1904 876 0000<br>
</span><span style="color: rgb(0, 0, 0);"><a href="mailto:d.perry1@yorksj.ac.uk" title="mailto:d.perry1@yorksj.ac.uk" style="margin-top: 0px; margin-bottom: 0px;">d.perry1@yorksj.ac.uk</a></span><span style="font-family: Arial, sans-serif; font-size: 9pt; color: rgb(0, 0, 0);">
<b>| </b><a href="http://www.yorksj.ac.uk/" style="margin-top: 0px; margin-bottom: 0px;">www.yorksj.ac.uk</a> </span></p>
</td>
</tr>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 74.7pt;">
<p style="margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;"><span style="font-family: Arial, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><b><img style="max-width: 100%; margin-top: 0px; margin-bottom: 0px;" data-outlook-trace="F:1|T:1" src="cid:aff4ea40-ccfb-4438-b050-26d40ea33fb0"> </b></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> 04 March 2024 13:27<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Dave Perry <d.perry1@yorksj.ac.uk><br>
<b>Subject:</b> Re: RequesterID error on Azure/Shib IdP integration</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.<br>
<br>
<br>
> Is this something I can suppress somewhere in the IdP?<br>
<br>
Answered on the list several times.<br>
<br>
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1282539600/SAMLAuthnConfiguration#Advanced-Behavior">https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fspaces%2FIDP4%2Fpages%2F1282539600%2FSAMLAuthnConfiguration%23Advanced-Behavior&data=05%7C02%7Cd.perry1%40yorksj.ac.uk%7C343b2d8e9d9b4a6e31a308dc3c4eecda%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C638451556884987527%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=rC0Oy%2FJRfa4CXeFqU%2FGP97vq9L8sgwQBM4cRY7HZtyk%3D&reserved=0</a><br>
<br>
"A Note about Azure".<br>
<br>
Whether you choose to accept a buggy SP or not is a decision you have to make, but this is what happens when you do.<br>
<br>
-- Scott<br>
<br>
<br>
</div>
</span></font></div>
</body>
</html>