Entity not found: RESPONDER, RESOURCENOTRECOGNIZED

Problem

What causes RESOURCENOTRECOGNIZED? (diag log only, no entry in audit log)

Solution

The SP metadata contains a different entity ID to the issuer in the Authnrequest.

There are two possible solutions:

  1. Ask SP to resend sp metadata where the entityID that matches the authnrequest issuer. Activate new metadata on Ubisecure SSO.

  2. Ask SP to send authnrequest issuer that matches metadata entityID. No changes required on IDP end.

Example

An example of this situation (see Figure 1):

com.ubisecure.saml2.metadata.SAMLEntityNotFoundException: Entity not found: https://www.identity-hub.com/authsaml2/metadata: RESPONDER, RESOURCENOTRECOGNIZED

Agent exists and entityID is https://www.identity-hub.com/idp/saml2/metadata

Authrequest has issuer <saml:Issuer>https://www.identity-hub.com/authsaml2/metadata</saml:Issuer> which is different.

Figure 1. Example of a situation where The SP metadata contains a different entity ID to the issuer in the Authnrequest