SSO-with-SAML - 403 Forbidden Error

[Vinod Kumar Kashyap]

Hi,

I have followed link on
http://www.oracle.com/technology/pub/articles/dev2arch/2006/12/sso-with-saml.html

and created applications on Weblogic 10.3
but I am getting the Forbidden error while accessing the appB

Error 403--Forbidden
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
10.4.4 403 Forbidden
The server understood the request, but is refusing to fulfill it......

Here are the my log enteries

####<Jul 31, 2009 8:17:57 PM IST> <Debug> <SecuritySAMLService> <Nvinod> <AdminServer> <ACTIVE ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <1249051677012> <BEA-000000> <SAMLDestinationSiteHelper: Signature verification failed with exception: org.opensaml.InvalidCryptoException: SAMLSignedObject.verify() failed to validate signature value>
####<Jul 31, 2009 8:17:57 PM IST> <Debug> <SecuritySAMLService> <Nvinod> <AdminServer> <ACTIVE ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <1249051677012> <BEA-000000> <SAMLDestinationSiteHelper: Unable to validate response -- returning SC_FORBIDDEN>
####<Jul 31, 2009 8:17:57 PM IST> <Debug> <SecuritySAMLService> <Nvinod> <AdminServer> <ACTIVE ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <1249051677027> <BEA-000000> <SAMLSingleSignOnService.doACSGet: Failed to get SAML credentials -- returning>


Please help.................


Thanks,
Vinod

[Deepak Bala]

I have not dealt with SAML but does this help

http://groups.google.com/group/opensaml-users/browse_thread/thread/cc28d2889c10b243

[Vinod Kumar Kashyap]

Hi,

Sorry, it doesn't help me as I have done configurations through admin console only and not through coding

Thanks,
Vinod