I've been setting up asimba using the OxTrust Gui and I've gotten to the point where my SP-> asimba IDP leg seems to be working but there is an error before the initiation of the asimba SP -> Idp leg. I was going to dig around in the asimba.xml configuration and see if I could find anything but I can't find one of the xml files that have the metadata set up for my SP and Idp... so: 1. When configuring asimba via OxTrust where does the configuration go? 2. Any ideas on this error(logs below) note the amazon idp is the idp configured to be used for this sp no not sure what "no suitable bindings found" means: INFO | jvm 1 | 2016/04/29 16:12:23 | <saml:Issuer>Catalog</saml:Issuer> INFO | jvm 1 | 2016/04/29 16:12:23 | <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"/> INFO | jvm 1 | 2016/04/29 16:12:23 | <samlp:RequestedAuthnContext Comparison="exact"> INFO | jvm 1 | 2016/04/29 16:12:23 | <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:X509</saml:AuthnContextClassRef> INFO | jvm 1 | 2016/04/29 16:12:23 | </samlp:RequestedAuthnContext> INFO | jvm 1 | 2016/04/29 16:12:23 | </samlp:AuthnRequest> INFO | jvm 1 | 2016/04/29 16:12:23 | INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] WebBrowserSSO Put on map? urlpath.context=web INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol AssertionConsumerServiceURL: https://local.opensesame.com/saml/consume INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol ProtocolBinding: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol NameIDPolicy AllowCreate in request: : true INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol Using NameID Format: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol Using requested RequestedAuthnContext ClassRefs: [urn:oasis:names:tc:SAML:2.0:ac:classes:X509] INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol ForcedAuthentication: false INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] AuthenticationRequestProtocol ProviderName: OpenSesame INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] WebBrowserSSO Using proxied requested AuthnContextClassRefs: [urn:oasis:names:tc:SAML:2.0:ac:classes:X509] INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] WebBrowserSSO Using proxied requested AuthnContextComparisonType: exact INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [INFO] MemorySessionFactory New session(s) added: NRGX3LE0PopDeSxE0jWY5Q for requestor 'Catalog' INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [INFO] EventLogger SESSION_CREATED, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 2, AUTHN_INITIATION_SUCCESSFUL, Catalog, SAML2 Profile, null INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [INFO] EventLogger PRE_AUTHZ_OK, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 1, USER_PRE_AUTHORIZED, Catalog, WebSSO, null INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [DEBUG] SSOService No valid TGT Cookie found INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:22] [INFO] EventLogger AUTHN_SELECTION_IN_PROGRESS, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 1, TGT_NOT_SUFFICIENT, Catalog, WebSSO, null INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] WebProfile No (optional) requestor specific 'web.always_show_select_form' property found for requestor with ID: Catalog INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] WebProfile No (optional) requestorpool specific 'web.always_show_select_form' property found for requestorpool with ID: requestorpool.1 INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] EventLogger AUTHN_SELECTION_OK, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 1, AUTHN_PROFILE_SELECTED, Catalog, WebSSO, null INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] SAML2AuthenticationMethod No 'i' value found in URLPath Context path ('web') INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] WebBrowserSSOProfile Request recieved: https://localauth.opensesame.com/asimba/sso/web INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] SAML2IDP Returning existing MetadataProvider for SAML2 IDP 'urn:amazon:webservices' INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] AbstractAuthNMethodSAML2Profile Could not retrieve metadata (IDP Role) for IdP with ID: urn:amazon:webservices INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [DEBUG] WebBrowserSSOProfile Could not determine binding, no IDP role descriptor found INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [ERROR] WebBrowserSSOProfile Authentication request could not be formed, since no suitable binding can be found INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] EventLogger AUTHN_IN_PROGRESS, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 1, AUTHN_METHOD_FAILED, Catalog, SAML2AuthenticationMethod_RemoteSAML, 0001 INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [ERROR] WebProfile Internal error during authN profile selection INFO | jvm 1 | 2016/04/29 16:12:23 | com.alfaariss.oa.OAException: 0001 INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.authentication.remote.saml2.profile.sso.WebBrowserSSOProfile.createAuthNRequest(WebBrowserSSOProfile.java:218) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.authentication.remote.saml2.profile.sso.WebBrowserSSOProfile.process(WebBrowserSSOProfile.java:193) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.authentication.remote.saml2.SAML2AuthenticationMethod.authenticate(SAML2AuthenticationMethod.java:339) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.authentication.web.AuthenticationManager.authenticate(AuthenticationManager.java:146) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.handleAuthentication(WebProfile.java:1241) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.handleAuthenticationSelection(WebProfile.java:1126) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.checkTGT(WebProfile.java:1082) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.handlePreAuthorization(WebProfile.java:857) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.service(WebProfile.java:417) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.WebSSOServlet.service(WebSSOServlet.java:234) INFO | jvm 1 | 2016/04/29 16:12:23 | at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:411) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.util.saml2.profile.AbstractSAML2Profile.forwardUser(AbstractSAML2Profile.java:422) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.processAuthenticationRequest(WebBrowserSSO.java:567) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.processSAMLRequest(WebBrowserSSO.java:484) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.process(WebBrowserSSO.java:309) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.SAML2Profile.service(SAML2Profile.java:281) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.OAServlet.service(OAServlet.java:245) INFO | jvm 1 | 2016/04/29 16:12:23 | at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.lang.Thread.run(Thread.java:745) INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] EventLogger AUTHN_IN_PROGRESS, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, 192.169.0.1, 1, INTERNAL_ERROR, Catalog, WebSSO, null INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [ERROR] WebProfile Internal error while processing request code=(1), session=(NRGX3LE0PopDeSxE0jWY5Q) INFO | jvm 1 | 2016/04/29 16:12:23 | com.alfaariss.oa.sso.SSOException: 0001 INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.handleAuthenticationSelection(WebProfile.java:1171) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.checkTGT(WebProfile.java:1082) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.handlePreAuthorization(WebProfile.java:857) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.profile.web.WebProfile.service(WebProfile.java:417) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.sso.web.WebSSOServlet.service(WebSSOServlet.java:234) INFO | jvm 1 | 2016/04/29 16:12:23 | at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:411) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.util.saml2.profile.AbstractSAML2Profile.forwardUser(AbstractSAML2Profile.java:422) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.processAuthenticationRequest(WebBrowserSSO.java:567) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.processSAMLRequest(WebBrowserSSO.java:484) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.profile.sso.WebBrowserSSO.process(WebBrowserSSO.java:309) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.profile.saml2.SAML2Profile.service(SAML2Profile.java:281) INFO | jvm 1 | 2016/04/29 16:12:23 | at com.alfaariss.oa.OAServlet.service(OAServlet.java:245) INFO | jvm 1 | 2016/04/29 16:12:23 | at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) INFO | jvm 1 | 2016/04/29 16:12:23 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) INFO | jvm 1 | 2016/04/29 16:12:23 | at java.lang.Thread.run(Thread.java:745) INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] MemorySessionFactory Session Expired: NRGX3LE0PopDeSxE0jWY5Q INFO | jvm 1 | 2016/04/29 16:12:23 | (ASIMBAWA) [2016-04-29 16:12:23] [INFO] EventLogger AUTHN_IN_PROGRESS, NRGX3LE0PopDeSxE0jWY5Q, null, null, null, null, 1, SESSION_EXPIRED, Catalog, SessionFactory, null Thanks!