SMAL

RE: SMAL

varaprasadt0001 — Mon, 01 Jul 2024 11:55:30 GMT

yes

[http-nio-8080-exec-7] ERROR com.appiancorp.security.auth.saml.SamlTestServlet - Unexpected exception during SAML authentication test: Signature was either invalid or signing key could not be established as trusted

RE: SMAL

David Jimenez — Tue, 25 Jun 2024 12:53:53 GMT

Against which attributes do you have mapped that values? Seems that the login is being made, but you don't have permissions in the platform

DO you see any error in logs?

RE: SMAL

varaprasadt0001 — Tue, 25 Jun 2024 12:50:56 GMT

In our SAML responses, we've observed a difference between two identity providers (IdPs) in how the <NameID> and emailaddress attributes are handled:

IdP1: The <NameID> and emailaddress are the same.
IdP2: The <NameID> and emailaddress are different.

RE: SMAL

David Jimenez — Tue, 25 Jun 2024 12:45:15 GMT

The only differences between responses is only that line?

RE: SMAL

varaprasadt0001 — Tue, 25 Jun 2024 12:21:55 GMT

Hi David

I observed a few differences between Idp1 and idp2 login and also have some Questions

Idp1 SAML Response contains the following lines and it's working fine

<AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>

</AuthnContext>

While IDP2 had it like this we geting 401 error in the interface

<AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Unspecified</AuthnContextClassRef>

</AuthnContext>

Could this be an issue?

Our generated Metadata file which we provided might have changed a little in terms of <md:RequestedAttribute> even if I guess that doesn’t matter, could that be a reason that it can’t authenticate?

RE: SMAL

David Jimenez — Tue, 25 Jun 2024 07:36:15 GMT

I do not understand...... First of all, I would try to find where the error is located.. (using SAML Tools).

RE: SMAL

varaprasadt0001 — Tue, 25 Jun 2024 04:38:23 GMT

Hi Stefan
In SAML responses, the <NameID> element and the <Attribute> elements for emailaddress was different is this difference lead to 401

RE: SMAL

varaprasadt0001 — Mon, 24 Jun 2024 13:25:29 GMT

Hi david why i am not seen the Signature hashing Hashing Algorithm option in smal configuration is there any problem with configuration

RE: SMAL

varaprasadt0001 — Mon, 24 Jun 2024 13:23:59 GMT

Hi Seefan thank you for you responce I raise the support ticket

RE: SMAL

David Jimenez — Mon, 24 Jun 2024 13:18:48 GMT

Install saml extension in your browser, and you will be able to compare both requests, in order to check where is the error.

RE: SMAL

Stefan Helzle — Mon, 24 Jun 2024 08:58:34 GMT

Did you consider to open a support case?