<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you, Don, and Marcus. Shib was down for us all afternoon as well, and we were scratching our heads on this as well. Your solution worked for us too, and our services are now back up.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
An example of the error message we were seeing in our logs, was:</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
2025-02-17 17:04:16,188 - 76.158.161.39 - WARN [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:117] - Profile Action SelectProfileConfiguration: Profile
<span style="color: rgba(var(--sk_highlight,18,100,163),1);"><u><a href="http://shibboleth.net/ns/profiles/saml2/sso/browser" target="_blank" id="OWA95ff56f3-a1ec-8ba0-4f18-555d62b52f5d" class="c-link c-link--underline OWAAutoLink" rel="noopener noreferrer" data-sk="tooltip_parent" data-stringify-link="http://shibboleth.net/ns/profiles/saml2/sso/browser" style="color: rgba(var(--sk_highlight,18,100,163),1); text-align: left;">http://shibboleth.net/ns/profiles/saml2/sso/browser</a></u></span> is
not available for RP configuration shibboleth.UnverifiedRelyingParty (RPID <span style="color: rgba(var(--sk_highlight,18,100,163),1);">
<u><a href="https://sp.eblib.com/shibboleth" target="_blank" id="OWAc5ca56cd-24d0-4f0b-d215-8cb0ca914cff" class="c-link c-link--underline OWAAutoLink" rel="noopener noreferrer" data-sk="tooltip_parent" data-stringify-link="https://sp.eblib.com/shibboleth" style="color: rgba(var(--sk_highlight,18,100,163),1); text-align: left;">https://sp.eblib.com/shibboleth</a></u></span>)<br>
2025-02-17 17:04:16,188 - 76.158.161.39 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: InvalidProfileConfiguration</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="appendonsend" style="color: inherit;"></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Changing the maxValidityInterval from 14 to 21 has resolved our issue here, but we're curious as to what changed until this afternoon. If any of you have any info about what went wrong here and how to prevent this from happening, any pointers would be much
appreciated!<br>
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Prasad</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><b>From:</b> users on behalf of Mittel, Don via users<br>
<b>Sent:</b> Monday, February 17, 2025 5:36 PM<br>
<b>To:</b> Mizushima, Marcus; Shib Users<br>
<b>Cc:</b> Mittel, Don<br>
<b>Subject:</b> Re: [EXT] RE: Shibboleth stopped working </span>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr;">Good to know. I'm going to be looking into getting switched over to that to try and about this issue in the future. </div>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr;">Thanks again. </div>
<div style="direction: ltr;">Don</div>
<div dir="auto" id="x_ms-outlook-mobile-signature" style="color: inherit;">
<div><br>
</div>
</div>
<hr style="display: inline-block; width: 98%;">
<div dir="ltr" id="x_divRplyFwdMsg" style="color: inherit;"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><b>From:</b> Mizushima, Marcus <mmizushima@calstate.edu><br>
<b>Sent:</b> Monday, February 17, 2025 7:29:10 PM<br>
<b>To:</b> Mittel, Don <dmittel@depaul.edu>; Shib Users <users@shibboleth.net><br>
<b>Subject:</b> RE: [EXT] RE: Shibboleth stopped working</span>
<div> </div>
</div>
<table cellspacing="0" cellpadding="0" style="direction: ltr; text-indent: revert; line-height: revert; white-space: revert; background-color: revert; display: table; margin: revert; width: 100%; height: revert; table-layout: fixed; color: revert; box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;">
<tbody>
<tr style="background-color: revert;">
<td style="width: 0px; height: revert; direction: ltr; text-indent: revert; line-height: revert; white-space: revert; border-width: revert; border-style: revert; border-color: revert; background-color: rgb(166, 166, 166); padding: 7px 2px; word-break: revert; color: revert;">
</td>
<td style="width: 100%; height: revert; direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; border-width: revert; border-style: revert; border-color: revert; background-color: rgb(234, 234, 234); padding: 7px 5px 7px 15px; word-break: revert; color: rgb(33, 33, 33);">
<div style="direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; color: revert;">
<span style="letter-spacing: revert; background-color: revert; line-height: revert;">You don't often get email from mmizushima@calstate.edu.
<u><a href="https://aka.ms/LearnAboutSenderIdentification" id="OWA6b785215-423f-d55e-78a8-da8d7a66f890" class="OWAAutoLink" data-auth="NotApplicable" style="color: revert; display: revert; background-color: revert;">Learn why this is important</a></u></span></div>
</td>
<td style="width: 75px; height: revert; direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; border-width: revert; border-style: revert; border-color: revert; background-color: rgb(234, 234, 234); padding: 7px 5px; word-break: revert; color: rgb(33, 33, 33);">
</td>
</tr>
</tbody>
</table>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">FWIW: If you’re using MDQ the metadata returned by that protocol does have the validUntil set for 2 weeks as expected.</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<div style="padding: 3pt 0in 0in; border-top: 1pt solid rgb(225, 225, 225);">
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 11pt;"><b>From:</b> Mittel, Don <dmittel@depaul.edu><br>
<b>Sent:</b> Monday, February 17, 2025 5:15 PM<br>
<b>To:</b> Mizushima, Marcus <mmizushima@calstate.edu>; Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: [EXT] RE: Shibboleth stopped working</span></p>
</div>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"> </p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 1pt; color: white;">I had not yet switched to the MDQ protocol yet, i was just reading about that. We are still using the old method for the metadata, but changing
the maxValidityInterval from 14 to 21 has resolved our issue. Thank you. Going to look into switching</span></p>
<p class="elementToProof" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="color: black;">I had not yet switched to the MDQ protocol yet, i was just reading about that. We are still using the old method for the metadata, but changing the maxValidityInterval from 14 to 21 has resolved our issue. Thank you.</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">Going to look into switching over to the MDQ and will make sure to set it for 21 days.</span></p>
<hr align="center" style="margin-right: 0in; margin-left: 0in; width: 98%;">
<div id="x_x_divRplyFwdMsg" style="color: inherit;">
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: black;"><b>From:</b> Mizushima, Marcus <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:mmizushima@calstate.edu" id="OWA51291979-2765-25c1-b83b-76d04b4086ee" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">mmizushima@calstate.edu</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: black;">><br>
<b>Sent:</b> Monday, February 17, 2025 7:07 PM<br>
<b>To:</b> Shib Users <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:users@shibboleth.net" id="OWA73f011eb-6484-d3bc-d440-e8f83d08f5eb" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">users@shibboleth.net</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: black;">><br>
<b>Cc:</b> Mittel, Don <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:dmittel@depaul.edu" id="OWA900f650e-3531-efb7-b007-c24294c5a862" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">dmittel@depaul.edu</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: black;">><br>
<b>Subject:</b> [EXT] RE: Shibboleth stopped working</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"> </p>
</div>
<table align="left" cellspacing="0" cellpadding="0" style="width: 100%; box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;">
<tbody>
<tr>
<td style="height: 74px; background-color: rgb(166, 166, 166); padding: 0in;"></td>
<td style="width: 100%; height: revert; direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; border-width: revert; border-style: revert; border-color: revert; background-color: rgb(234, 234, 234); padding: 15px; word-break: revert; color: rgb(33, 33, 33);">
<p style="direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="letter-spacing: revert; font-family: "Segoe UI", sans-serif; color: black;">You don't often get email from
</span><span style="letter-spacing: revert; font-family: "Segoe UI", sans-serif; color: blue;"><u><a href="mailto:mmizushima@calstate.edu" id="OWAcc16831e-a179-2c33-fbb4-bc3659eff418" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">mmizushima@calstate.edu</a></u></span><span style="letter-spacing: revert; font-family: "Segoe UI", sans-serif; color: black;">.
</span><span style="letter-spacing: revert; font-family: "Segoe UI", sans-serif; color: blue;"><u><a href="https://urldefense.com/v3/__https:/aka.ms/LearnAboutSenderIdentification__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpia-Rgpmm$" id="OWA5fbaa3b4-0d2c-7697-5bbe-12371371dd98" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/aka.ms/LearnAboutSenderIdentification__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpia-Rgpmm$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">Learn
why this is important</a></u></span></p>
</td>
<td style="width: 75px; height: revert; direction: ltr; text-align: left; text-indent: revert; line-height: revert; white-space: revert; border-width: revert; border-style: revert; border-color: revert; background-color: rgb(234, 234, 234); padding: 5px; word-break: revert; color: rgb(33, 33, 33);">
</td>
</tr>
</tbody>
</table>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">Check your IdP metadata provider setting for InCommon metadata. If it is configured to use the InCommon aggregate instead of using the MDQ protocol, then
check if you have set a RequiredValidUntil metadata filter. If the maxValidityInterval is set to 14 days (P14D or some other time unit equivalent), you’ll want to temporarily increase that to 21 days. This is because recently the InCommon aggregate was published
with a validUntil date 3 weeks in the future, instead of 2 weeks.</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">You can also confirm that this is the issue if you see messages like this in your idp-process.log:</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">ERROR [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:376] - Metadata Resolver FileBackedHTTPMetadataResolver incommonaggregate:
Error occurred while attempting to refresh metadata from '</span><span style="font-size: 11pt; color: blue;"><u><a href="https://urldefense.com/v3/__https:/mdq.incommon.org/entities__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpibzQ393J$" id="OWAa70ce99b-2f55-9967-f4ad-4922c030fb40" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/mdq.incommon.org/entities__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpibzQ393J$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">https://mdq.incommon.org/entities</a></u></span><span style="font-size: 11pt;">'</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">net.shibboleth.utilities.java.support.resolver.ResolverException: Error filtering metadata from
</span><span style="font-size: 11pt; color: blue;"><u><a href="https://urldefense.com/v3/__https:/mdq.incommon.org/entities__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpibzQ393J$" id="OWAf18be3ce-66e4-ccb4-558b-49371fba0e8e" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/mdq.incommon.org/entities__;!!MWueTNF2!Q8hDmktJ0wscZHLdJyKTLZBQP5XKDLH4UrdXaeuLlqrUR5Pc6xn7C7yzZU3fMdmn0kk746YMwVFP_-cpibzQ393J$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">https://mdq.incommon.org/entities</a></u></span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> at org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver.processNonExpiredMetadata(AbstractReloadingMetadataResolver.java:552)</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">Caused by: org.opensaml.saml.metadata.resolver.filter.FilterException: Metadata's validity interval PT502H50M7.901S is larger than is allowed PT336H</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> at org.opensaml.saml.metadata.resolver.filter.impl.RequiredValidUntilFilter.filter(RequiredValidUntilFilter.java:97)</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">HTH,</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">Marcus Mizushima</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">Identity Management Analyst</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">California State University, Office of the Chancellor</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<div style="padding: 3pt 0in 0in; border-top: 1pt solid rgb(225, 225, 225);">
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 11pt;"><b>From:</b> users <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:users-bounces@shibboleth.net" id="OWA92bd11dd-a78c-8b8e-f7b2-17cf39b48350" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">users-bounces@shibboleth.net</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt;">>
<b>On Behalf Of </b>Mittel, Don via users<br>
<b>Sent:</b> Monday, February 17, 2025 4:46 PM<br>
<b>To:</b> Shib Users <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:users@shibboleth.net" id="OWA8334906d-0344-6411-90dc-45a5fe854eb0" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">users@shibboleth.net</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt;">><br>
<b>Cc:</b> Mittel, Don <</span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: blue;"><u><a href="mailto:dmittel@depaul.edu" id="OWA462fbd9b-1160-9553-0e0d-01c54256e09e" class="OWAAutoLink" style="color: blue; margin-top: 0px; margin-bottom: 0px;">dmittel@depaul.edu</a></u></span><span style="font-family: Calibri, sans-serif; font-size: 11pt;">><br>
<b>Subject:</b> Shibboleth stopped working</span></p>
</div>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"> </p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-size: 1pt; color: white;">Shibboleth was working find until earlier today when all of the sudden my servers started reporting errors like this: 2025-02-17 17:</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">41:</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">02,722
- WARN [org.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">opensaml.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">saml.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">metadata.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">resolver.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">impl.</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">AbstractMetadataResolver:</span><span style="font-family: Arial, sans-serif; font-size: 1pt; color: white;"> </span><span style="font-size: 1pt; color: white;">551]
- FileBackedHTTPMetadataResolver</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">Shibboleth was working find until earlier today when all of the sudden my servers started reporting errors like this:</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">2025-02-17 17:41:02,722 - WARN [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:551] - FileBackedHTTPMetadataResolver ICMD: Metadata backing
store contained an EntityDescriptor with the ID: </span><span style="color: blue;"><u><a href="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" id="OWA490304e1-6951-c35d-bd2c-6c8b93791443" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">https://depaul-sa.terradotta.com/sp/shibboleth</a></u></span><span style="color: black;">,
but it was no longer valid</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">2025-02-17 17:41:02,722 - INFO [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:185] - Message Handler: No metadata returned for
</span><span style="color: blue;"><u><a href="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" id="OWA71a4076b-cfd9-17c0-b641-1adcd15b3dea" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">https://depaul-sa.terradotta.com/sp/shibboleth</a></u></span><span style="color: black;"> in
role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol urn:oasis:names:tc:SAML:2.0:protocol</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">2025-02-17 17:41:02,722 - WARN [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:164] - Profile Action SelectProfileConfiguration: Profile
</span><span style="color: blue;"><u><a href="https://urldefense.com/v3/__http:/shibboleth.net/ns/profiles/saml2/sso/browser__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwiOKxibM$" id="OWA46320766-89df-3262-7c60-289277aa193e" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__http:/shibboleth.net/ns/profiles/saml2/sso/browser__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwiOKxibM$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">http://shibboleth.net/ns/profiles/saml2/sso/browser</a></u></span><span style="color: black;"> is
not available for RP configuration shibboleth.UnverifiedRelyingParty (RPID </span>
<span style="color: blue;"><u><a href="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" id="OWA2e15742a-6bcd-155b-4460-64651a8b52c9" class="OWAAutoLink" originalsrc="https://urldefense.com/v3/__https:/depaul-sa.terradotta.com/sp/shibboleth__;!!MWueTNF2!UUWjYdTqkZ5l9Gc_3GYfmI0NBtK-wROLfe6f9OnvwawRS4PdvekAuHWx6WIpIoYoipQpSI6YokaWXJWwpf9dUdE$" data-auth="VerificationFailed" style="color: blue; margin-top: 0px; margin-bottom: 0px;">https://depaul-sa.terradotta.com/sp/shibboleth</a></u></span><span style="color: black;">)</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">2025-02-17 17:41:02,722 - WARN [org.opensaml.profile.action.impl.LogEvent:94] - A non-proceed event occurred while processing the request: InvalidProfileConfiguration</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">Now any time we try to access a relying party we get this error:</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"> </span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"><b>Unsupported Request</b></span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;">The application you have accessed is not registered for use with this service.</span></p>
<p style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="color: black;"> </span></p>
</body>
</html>