Forbidden /saml2/acs/ and Signature missing for response
See original GitHub issueI’ve tried to follow the documentation and I almost got this working with external IdP. The only problem is when user is redirected back to django SP I get “Authentication Error Access Denied”. Django log looks like this:
"GET /favicon.ico HTTP/1.1" 404 3199
Signature Error: Signature missing for response
XML parse error: Signature missing for response
Forbidden: /saml2/acs/
"POST /saml2/acs/ HTTP/1.1" 403 378
What am I missing?
Issue Analytics
- State:
- Created 2 years ago
- Comments:21 (10 by maintainers)
Top Results From Across the Web
Signature error: Signature missing for response #490
Hello, Unable to validate Idp and Sp I am using the application available under examples idp2 and sp-wsgi to validate idp and sp....
Read more >Signature missing when URL decoded
I am trying to connect to a service using simplesamlphp. However, when I'm generating the Signature, it's showing on the URL but when...
Read more >python - SAML response signiture missing
SignatureError : Signature missing for response . I am using djangosaml2 , in turn using pysaml2 . It seems to hit an issue...
Read more >Solved: HUE fails with saml
For the SAML response to pysaml attribute mapping, there is a built-in mapping in ... -anon- - "POST /saml2/acs/ HTTP/1.1" -- 403 access...
Read more >CB Response: SAML / SSO auth failure after upgradi...
SAML Assertion isn't getting processed correctly; Error in /var/log/cb/coreservices/debug.log. <err> saml2.entity - Signature Error: Signature missing for ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I added the “SAML_USE_NAME_ID_AS_USERNAME” setting and I’ve used “mail” instead of “emailAddress”. Now it’s working. I guess you can close this issue.
As I see you still don’t receive any attributes from the idp
you can use the nameid (that’s the email in your) as lookup field
SAML_USE_NAME_ID_AS_USERNAME = True
the required attributes appears in your sp metadata? I see that you define emailAddress but in which schema we have it defined so?
I probably obtain for
mail
oremail