<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 7/23/2024 3:35 PM, Alberto DeAngelis
via users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAPer1o-4-H5kEpXcOfmOOavANvAhzNJHcvu4CpxOk9S16z0mWA@mail.gmail.com">
<div>This is the error I see in SAML tracer:</div>
<div><br>
</div>
<div><span
style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag"
style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span
class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:Status</span>></span><span
style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag"
style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span
class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusCode</span>
<span class="gmail-hljs-attr" style="color:rgb(221,0,169)">Value</span>=<span
class="gmail-hljs-string" style="color:rgb(0,62,170)">"urn:oasis:names:tc:SAML:2.0:status:Responder"</span>
/></span><span
style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag"
style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"><<span
class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusMessage</span>></span><span
style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">An
error occurred.</span><span class="gmail-hljs-tag"
style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"></<span
class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:StatusMessage</span>></span><span
style="color:rgb(68,68,68);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial">
</span><span class="gmail-hljs-tag"
style="color:rgb(220,45,37);font-family:Consolas,"Lucida Console",Courier,monospace;font-size:10.6667px;font-variant-ligatures:normal;text-decoration-style:initial;text-decoration-color:initial"></<span
class="gmail-hljs-name" style="color:rgb(0,116,232)">saml2p:Status</span>></span></div>
<div><br>
</div>
<div>Auth logs:</div>
<div>
<p
style="margin:0px;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Andale Mono";font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:rgb(47,255,18);background-color:rgba(0,0,0,0.9)"><span
style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing;
- [10.0.0.0]2024-07-23 20:02:22,802 - INFO
[Shibboleth-Audit.SSO:338] -
2024-07-23T20:02:22.802073Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|idaa21fd7db0d14dfa9555524d77cad219|<a
href="https://api.prod.us-east1.manual.graduway.com/Saml2|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://"
moz-do-not-send="true" class="moz-txt-link-freetext">https://api.prod.us-east1.manual.graduway.com/Saml2|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://</a><some_url>/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_05e22dd43dc51fb8e7ba2ff55715e605||||||</span></p>
</div>
</blockquote>
<p>The error should be somewhere above the audit line in the
idp-process.log. It might be due to using "graduway" instead of
the full SP entity ID in the c:relyingPartyIds in your relying
party entry to turn off encryption.<br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>