Shibboleth Developers

[Scott Cantor <>]

> Well, OK, now the shar seems to stay running.  I now get, at 
> my target, when authenticating via my UW origin, which is 
> using a 1.0 build obtained on May 19, an Access System Failure with:
> 
> SHIRE failure at (https://perq.cac.washington.edu/shibboleth/SHIRE)
> 
> Exception: Fatal Profile Error: 
> SAMLPOSTProfile::getSSOAssertion() unable to find a valid SSO 
> assertion

These days, that error usually means an audience mismatch. You might check 
that InCommon vs. incommon issue. Compare the ini file's
policy list to the origin.properties policy URI list.

The log file should say something about skipping an assertion because of 
audiences.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--