"NoPassive" SAML response

Alex (Google)

unread,

Sep 3, 2008, 4:43:29 PM9/3/08

to simpleSAMLphp

Hi,

For a "NoPassive" response, Google Apps expects a SAML response status
e.g.:

<Status>
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder">
<StatusCode Value="urn:oasis:names:tc:SAML:
2.0:status:NoPassive"/>
</StatusCode>
</Status>

but it appears that simpleSAMLphp is sending:

<Status>
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:NoPassive"></
StatusCode>
</Status>

-alex

Mads Freek Petersen

unread,

Sep 4, 2008, 3:57:33 PM9/4/08

to simple...@googlegroups.com

Hi Alex

SimpleSAMLphp's answer is incorrect due to my misreading of the
specification.

Will be fixet tomorrow - danish time.

-Mads

Alex (Google)

unread,

Sep 4, 2008, 7:21:18 PM9/4/08

to simpleSAMLphp

Thanks Mads!

-alex

Arcimboldo

unread,

Sep 9, 2008, 8:58:27 AM9/9/08

to simpleSAMLphp

Thanks for the help Mads.

There are still two little typos anyway (an extra semicolon (;) and an
uppercase/lowercase mismatch in xml tags):

Index: lib/SimpleSAML/XML/SAML20/AuthnResponse.php
===================================================================
--- lib/SimpleSAML/XML/SAML20/AuthnResponse.php (revision 859)
+++ lib/SimpleSAML/XML/SAML20/AuthnResponse.php (working copy)
@@ -737,8 +737,8 @@
$statusCode = '<samlp:StatusCode Value="urn:oasis:names:tc:SAML:
2.0:status:Success"/>';
} else {
$statusCode = '<samlp:StatusCode Value="urn:oasis:names:tc:SAML:
2.0:status:Responder">
- <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:' .
$status . '"/>;
- </samlp:statusCode>';
+ <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:' .
$status . '"/>
+ </samlp:StatusCode>';
}

Mads Freek Petersen

unread,

Sep 9, 2008, 9:10:40 AM9/9/08

to simple...@googlegroups.com

On 09/09/2008, at 14.58, Arcimboldo wrote:

> There are still two little typos anyway (an extra semicolon (;) and an
> uppercase/lowercase mismatch in xml tags):