Trying SAML with SSOCircle as IdP provider.

Imported the public Idp metadata from SSOCircle into IdP Config document in idpconfig.nsf. Exported idp.xml from Domino and imported into SSOCircle.

Since out-of-box supported IdP's are ADFS and TFIM, set a new option called Other in IdP provider Product field. When I try to reach Domino host, SAMLRequest token and RelayState are successfully generated and included as query params and successfully redirected to Idp SSO URL. However, there it is erroring out.

Upon inspection using SAML tracer, the AuthnRequest is missing values for Issuer and AssertionConsumerServiceURL. Why???

  • Sample AuthRequest generated by Domino – Sri V Dec 17 '15 at 15:27
  • <samlp:AuthnRequest ID="_bec424fa5103428909a30ff1e31168327f79474984" Version="2.0" IssueInstant="2011-10-01T11:39:34Z" ForceAuthn="false" IsPassive="false" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" AssertionConsumerServiceURL="" > <saml:Issuer/> <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/></samlp:AuthnRequest> – Sri V Dec 17 '15 at 15:28
  • Exactly the same problem here and some other stuff missing too like Signature URL parameter. – Panu Haaramo Feb 24 '16 at 18:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.