Re: Integrating mulitple SP and IDP with sample application

Andy Hale wrote:

> I figured out how to add additional IDPs.  I just added another 
> IDPDescriptor entry in /WEB-INF/sourceid-sso-providers.xml
>
> Andy Hale wrote:
>
>> I would like to know how to demo the sample application with mulitple 
>> SPs and IDPs.  Is there any documentation on how to do this?  If 
>> someone could let me know what files and entries to modify I would 
>> appreciate it.
>>
>> Andy Hale
>>
>
>

I can see the IDPs now but I receive the  error below.  I click on the 
link to federate with one of the new IDPs with the link 
<http://localhost:8080/sso-sample-sp/sp/federate.jsp?providerID=J2NESSO-IDP1> 
, but the logs shows that the ProviderID is SourceID-Sample-SP.  Am I 
missing some configurations?  I have also added the new SPs in the 
SPDescriptor entrys in the IDPs sourceid-sso-providers.xml.

------------CUT---------------
[http8080-Processor4] ERROR org.sourceid.sso.servlets.Authenticator  - 
Exception thrown in Authentication service: === Throwable (or Exception) 
information ===
throwable class name: java.lang.IllegalArgumentException
toString(): java.lang.IllegalArgumentException: AuthnRequest received 
from unrecognized SP.
getMessage(): AuthnRequest received from unrecognized SP.
Stack Trace: java.lang.IllegalArgumentException: AuthnRequest received 
from unrecognized SP.
        at 
org.sourceid.sso.servlets.Authenticator.service(Authenticator.java:161)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:284)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:204)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:257)
        at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
        at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
        at 
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:245)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:199)
        at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
        at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:195)
        at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:164)
        at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:149)
        at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:156)
        at 
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:151)
        at 
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:564)
        at 
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)
        at 
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:206)
        at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:828)
        at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:700)
        at 
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:584)
        at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
        at java.lang.Thread.run(Thread.java:534)
 
 
 
=== Parameters (Form and/or Querystring) ===
Requested URL: http://localhost:8080/j2nesso-idp1/sso/authn
Unparsed QueryString: 
RequestID=i435mpj&MajorVersion=1&MinorVersion=0&IssueInstant=2004-03-05T19%3A52%3A06Z&ProviderID=SourceID-Sample-SP&ForceAuthn=false&IsPassive=false&Federate=true&ProtocolProfile=http%3A%2F%2Fprojectliberty.org%2Fprofiles%2Fbrws-art&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=4Sl8KbLAiAbHWqPUCgkN2%2FBX4E8LnnjyD0xuxSHFmlf1ayWSj77WDnt0cmzR2Uxx48gZjG9LdqcV%0D%0AFt8oeXxmjO7mmXeOH449rHK6RFTZFgq58zRgNp3w%2BH7HHig0mHJlWk4xbCdDCu7EVciL1WmLewZl%0D%0A04V6%2Ffb1ZXUvC7JTp24%3D
IssueInstant: 2004-03-05T19:52:06Z
Signature: 
4Sl8KbLAiAbHWqPUCgkN2/BX4E8LnnjyD0xuxSHFmlf1ayWSj77WDnt0cmzR2Uxx48gZjG9LdqcV
Ft8oeXxmjO7mmXeOH449rHK6RFTZFgq58zRgNp3w+H7HHig0mHJlWk4xbCdDCu7EVciL1WmLewZl
04V6/fb1ZXUvC7JTp24=
IsPassive: false
MinorVersion: 0
SigAlg: http://www.w3.org/2000/09/xmldsig#rsa-sha1
Federate: true
RequestID: i435mpj
ProtocolProfile: http://projectliberty.org/profiles/brws-art
ForceAuthn: false
MajorVersion: 1
ProviderID: SourceID-Sample-SP
=== Request Attributes ===
=== HTTP Header contents ===
Method: GET
host: localhost:8080
user-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113
accept: 
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
accept-language: en-us,en;q=0.5
accept-encoding: gzip,deflate
accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
keep-alive: 300
connection: keep-alive
referer: http://localhost:8080/sso-sample-sp/sp/index.jsp
 
[http8080-Processor4] DEBUG 
org.apache.catalina.core.ApplicationDispatcher  - 
servletPath=/defaultExceptionHandler.jsp, pathInfo=null, 
queryString=null, name=null
[http8080-Processor4] DEBUG 
org.apache.catalina.core.ApplicationDispatcher  -  Path Based Forward
[http8080-Processor4] DEBUG 
org.apache.catalina.core.ApplicationDispatcher  -  Disabling the 
response for futher output
 
[1]+  Done                    nedit login.html
[halea@erbium j2nesso]$ tlog
accept-language: en-us,en;q=0.5
accept-encoding: gzip,deflate
accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
keep-alive: 300
connection: keep-alive
referer: http://localhost:8080/sso-sample-sp/sp/index.jsp

-- 
Andy Hale - CSC
Fleet Numerical Meteorology and Oceanography Center (FNMOC)
[email protected]