SAML error after Asyncos 13

[jape0002_]

Hi!
After upgrading to Asyncos 13.0.0-187 on my SMA I get an error when trying to use SAML login.

Error URL: Error Failed to parse SP metadata file.

When I go into settings for SAML and click on view metadata or download metadata I also get an error: " Error occured while retrieving metadata information"

I tried to create a new IDP-config but same error on that one.

Anyone else that have seen this? I created a case regarding this.

[Ken Stieers]

On the SMA side, did you configure the meta data first (set a cert, at the company name/group, etc? )

[jape0002_]

Hi!
The SAML login was working prior to upgrading to version 13. So something happend after the upgrade.

[Ken Stieers]

I'm currently in the SMA 13.5 beta, and I see the same thing.

I'll raise a ticket.

[Ken Stieers]

Click into the Service Provider settings.

Did the Name ID Format change/get blanked?  Mine did….

I’m pretty sure it should be this:   urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

(that’s what is on my ESA…)

[mjpinvestor]

I am getting the same error and the Name ID field is populated (it is actually a field that can't be edited).  When attempting to download the sp metadata the error occurs.

Error occured while retrieving metadata information

[jape0002_]

It is blank and it is greyed out. If I change a value I get an error that says that there field can't be blank. But I can't edit the field.

[Ken Stieers]

They found the issue, and there should be a bug published shortly.

You have two options as a workaround:

A.  Recreate the SP profile.  If you set it up with the same values and same certificate, it will work without touching the ADFS side.  (I did this, and it does work.)

B.  Open a TAC case and have them do the following via the service tunnel:

1. Login to device root console and goto '/data/db/config/external_auth.saml/data.cfg'
2. Open data.cfg, search for sp_settings variable, within that search for 'nameidformat' and change it to 'name_id_format' and save the file
3. Go to SAML option in UI and Open the Service Provider Settings
4. Now you will see Name_id_format having values in it, submit and commit the changes.

2. delete the profile and and recreate it. 

[Ken Stieers]

Bug ID CSCvr63378, though it may not be visible yet. 

[jape0002_]

Great, I have already created a tac case but I have not yet received any feedback on it. I will point my technican to the bug Id :)

[jape0002_]

I recreated the SP and it worked. But the technician also found something wrong with the configfile itself (wrong end of line character).