Re: [Unity-idm-discuss] Nullpointer when SP tries to access IDP

[Willem E. <wi...@cl...>]

Hi Krzysztof,


On 13/04/17 00:00, Krzysztof Benedyczak wrote:
> Hi,
>
> W dniu 11.04.2017 o 17:17, Willem Elbers pisze:
>> Dear Krzysztof,
>>
>> we have received the following stacktrace when trying to authenticate
>> via one of our SPs:
> [CUT]
>> Any ideas what can be the cause of this issue and how we can improve the
>> error message?
>
> This is caused by a bug in Unity, unfortunately. Unity doesn't accept
> SAML authN request without the AssertionConsumerServiceURL attribute.
> This attribute is not mandatory in SAML so Unity should happily accept
> such case.
>
> Fixing the request validator (and directly this bug) will be trivial,
> but I will have to verify whether the rest of the stack behaves
> correctly when this attribute is not set (what means that either
> metadata default should be used or AssertionConsumerServiceIndex
> picking endpoint from metadata).
>
> I've opened a ticket to track this problem.
Thanks. Any estimation on the timeline to fix this issue?

We've discussed this issue with the problematic SP and it apparently is
not easy for them to solve.
>
> Best,
> Krzysztof
>
Best,
Willem

-- 
Willem Elbers
CLARIN ERIC
www.clarin.eu | tel: +31-(0)85-0091277 | skype: wjm.elbers