Forum Discussion

Saty_Attota_201's avatar
Saty_Attota_201
Icon for Nimbostratus rankNimbostratus
Jun 20, 2018

SP metadata with SAML extension mdrpi:RegistrationInfo failing v 12.1.2

One of SP connector metadata has following SAML extensions. F5 could not parse this metadata. Any suggestions how to accomplish this task.

 

' target="_blank" rel="nofollow">https://incommon.org"/>; http://macedir.org/entity-category"; NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> ;

 

Thanks in advance.

 

APM
application delivery

2 Replies

Sort By
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 21, 2018

    when you have this kind of problem, the best way is to create the SP Manually without importing IT. More "mdrpi:RegistrationInfo" is not used in F5 SP settings.

     

    I already had this kind of problem when I tried to import SP that contain more information needed...

     

    More important that you need is:

     

    • Service Provider Entity ID
    • Assertion Consumer Service(sso)
    • Security settings (signed, encrypt, ...), public cert of the sp
    • and optionnaly SLO

    Let me know if you need help.

     

    Regards

     

  • Saty_Attota's avatar
    Saty_Attota
    Icon for Nimbostratus rankNimbostratus
    Jun 21, 2018

    F5 support helped to upload this metadata with little modification. Looks like making this small change worked with F5, which I am not aware of it. On shibboleth it was not required.

     

    ' target="_blank" rel="nofollow">https://incommon.org"/>; xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="; NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> ;