The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Dubravko Voncina <dubravko.voncina AT srce.hr>]

Hello Daniel,

I apologize for a bit late response, I'm very busy trying to solve several 
different problems these days.
I think that problem might be caused by your IdP not providing NameID Format 
value in 

<saml2:Subject>...</saml2:Subject> 

part of autentication response message.

Since your IdP provides attribute eduPersonTargetedID, NameID Format value is 
actually not important, but it still has to be provided in Subject part of 
AuthNResponse message. Otherwise our SP can't parse AuthNResponse message 
properly.

Kind regards,

Dubravko Voncina
Middleware and Data Services Department
University of Zagreb, University Computing Centre, www.srce.unizg.hr
dubravko.voncina AT srce.hr,
 tel: +385 98 219273, fax: +385 1 6165559




> On 10 Jul 2017, at 17:07, Ansong, Daniel 
> <d.ansong AT ucl.ac.uk>
>  wrote:
> 
> Hi Stefan,
> 
> Thanks for chasing this up, but am yet to hear back from the Operations team
> 
> Regards
> 
> Daniel
> 
> -----Original Message-----
> From: Stefan Winter 
> [mailto:stefan.winter AT restena.lu]
>  
> Sent: 07 July 2017 08:04
> To: Ansong, Daniel; 
> cat-users AT lists.geant.org
> Subject: Re: [[cat-users]] Eduroam CAT tool for UCL (Ref:IN:00189393)
> 
> Hello,
> 
>> Apologies for the lack of info in the first email I’m a bit new to 
>> this stuff so bear with me.
>> 
>> Please see answers to your questions below
> 
> Thank you for that!
> 
> 
>>> If you do not, what is the error you are getting / evidence you are 
>>> seeing?
>> 
>> *Once I authenticat**e through our local shibboleth service**, it gets 
>> stuck on a blank screen at address:*
>> 
>> *https://monitor.eduroam.org/sp/module.php/saml/sp/saml2-acs.php/defau
>> lt-sp*
> 
> eduroam CAT does not have its own user authentication. We send admin login 
> authentication requests to a central auth server for all eduroam Operations 
> Support Services (the "eduroam SP proxy") running on monitor.eduroam.org. 
> That is the URL you are seeing.
> 
> Since this particular box is not under CAT control, I will forward this 
> request to the eduroam Operations Team. They will get back to you - 
> probably they need a timestamp of your unsuccessful login attempt to find 
> the issue in the logs...
> 
> Greetings,
> 
> Stefan Winter
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users