java - OpenAM + Spring Security SAML gettting SAML Request is invalid response -
i'm facing problem when using openam spring security saml2 example.
i have followed this tutorial configure spring saml2 sample openam. i'm getting error after selecting http://localhost:8080/openam-12.0.0 , click login , browser return "http status 500 - saml request invalid.".
both example project , openam deployed in same tomcat server, didn't exception in logs.
i have attached below decoded saml request extracted url.
<?xml version="1.0" encoding="utf-8"?> <saml2p:authnrequest xmlns:saml2p="urn:oasis:names:tc:saml:2.0:protocol" assertionconsumerserviceurl="http://localhost:8080/sso/saml/sso" destination="http://localhost:8080/openam-12.0.0/ssoredirect/metaalias/idp" forceauthn="false" id="a436bg49hb19hhe73i2c450iadb7c8d" ispassive="false" issueinstant="2015-03-16t12:14:31.468z" protocolbinding="urn:oasis:names:tc:saml:2.0:bindings:http-post" version="2.0"> <saml2:issuer xmlns:saml2="urn:oasis:names:tc:saml:2.0:assertion">http://localhost:8080/sso/saml/metadata</saml2:issuer> </saml2p:authnrequest>
thanks,
"the saml request invalid" error message means sort of trust issue, think should check circle of trusts configured in openam see if contains relevant entities, , if does, make sure sp uses correct entityid when making request (within issuer
field).
in case though, shouldn't deploy openam using "localhost" (otherwise you'll see problems cookies later on).
Comments
Post a Comment