Vi har precis konfigurerat Shibboleth som en SAML proxy så att inloggningarna sker i vår ADFS, men i vårt produktionssystem får jag lite fel i loggen som jag inte ser i testsystemet och jag lyckas inte lista ut vad jag gjort fel.

Inloggningarna fungerar, men Shibboleth verkar försöka få ut credentials via X509, vilket jag inte förstår.

Exempel ur loggfilen:

2024-12-12 09:33:30,367 - INFO [Shibboleth-Audit.SSO:333] - 2024-12-12T08:33:30.367119537Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_0ece87735e0caab78b3376d2ba458b26|http://idp.auth.gu.se/adfs/services/trust|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://idp3.it.gu.se/idp/shibboleth||||||||

2024-12-12 09:33:30,518 - INFO [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider:130] - The X509Data contained no X509Certificate elements, skipping credential extraction|

2024-12-12 09:33:30,518 - WARN [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver:291] - No credentials could be extracted from KeyInfo child with QName {http://www.w3.org/2000/09/xmldsig#}X509Data by any registered provider|

2024-12-12 09:33:30,522 - INFO [net.shibboleth.idp.saml.saml2.profile.impl.ValidateSAMLAuthentication:334] - Profile Action ValidateSAMLAuthentication: SAML authentication succeeded for 'null'|

2024-12-12 09:33:30,522 - INFO [Shibboleth-Audit.SSO:333] - 2024-12-12T08:33:30.522471008Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_0ece87735e0caab78b3376d2ba458b26|http://idp.auth.gu.se/adfs/services/trust|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://idp3.it.gu.se/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_fb0ae833-752f-449f-9531-6a2845157d0d||urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid||_cd385be1-5f51-4a85-9f2f-f09f26fe12bc|

2024-12-12 09:33:30,523 - INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile Action FinalizeAuthentication: Principal xgalto authenticated|

2024-12-12 09:33:30,625 - INFO [Shibboleth-Audit.SSO:333] - 2024-12-12T08:33:30.625529647Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_2609e58d9318b5a612c863144e897b7e|https://www.start.ladok.se/gui-sp|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://idp3.it.gu.se/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_ea85d4424aa94ae0a124466e9786e037|xgalto|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|eduPersonAssurance,eduPersonScopedAffiliation,displayName,surname,givenName,samlSubjectID,schacHomeOrganization,eduPersonPrincipalName,email|