Hi All

Am testing CAS 5.2.6 to work on a delegated authentication mode against 
Azure AD

When we get a SAML response back from the Idp, am getting redirect to CAS > 
UnAuthorized Access page

The logs indicate the following errors

2018-09-19 19:28:09,358 ERROR 
[org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator] - <Current 
assertion validation failed, continue with the next one>
org.pac4j.saml.exceptions.SAMLException: Signature is not trusted
        at 
org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateSignature(SAML2DefaultResponseValidator.java:704)
 
~[pac4j-saml-2.3.1.jar:?]
...
...
2018-09-19 19:28:09,363 DEBUG 
[org.apereo.cas.support.pac4j.web.flow.DelegatedClientAuthenticationAction] 
- <The request requires http action>
org.pac4j.saml.exceptions.SAMLException: No valid subject assertion found 
in response
...
...

Any pointers on which cert should be imported into the keystore ?


Thanks 
Raghavan



-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ee86f46b-7195-4371-b5ae-98148242a283%40apereo.org.

Reply via email to