Access Manager User Discussions

The XML is malformed - What is the problem?

Nicolai Glahn Super User

9 months ago

Hi,

Using NAM 5.0.4.0-44

I am trying to find out what the problem is with metadata from the following URL:

https://adgangsstyring.eksterntest-stoettesystemerne.dk/runtime/saml2auth/metadata.idp

Firstly NAM can't fetch the metadata from the URL saying: "The metadata could not be retrieved from the url. "

Secondly, when importing via the "MetaData Text" optin, the response is: "The XML is malformed. "

Validating online against SAML2 Validators, it is reported that the metadata are fine

Can anyone figure out, why NAM is complaining about the metadata?

Perhaps even suggest (or even better tell me exactly) what the problem is?

Tags:

SAML2

metadata

Top Replies

Verified Answer

+1 Sebastijan Sef 9 months ago

I had no problem creating new SAML SP and importing metadata text:

This was done on 5.0.4 appliance.

//s

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
Cancel
Vote Up +1 Vote Down

Sign in to reply

Reject Answer

Cancel
Verified Answer

+1 Sebastijan Sef 9 months ago in reply to Sebastijan Sef

Unless you are trying to import this metadata as new IDP. In that case you will get "The XML is malformed" error, since metadata contains only SPSSODescriptor and no IDPSSODescriptor.

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
Cancel
Vote Up +1 Vote Down

Sign in to reply

Reject Answer

Cancel
0 Nicolai Glahn 9 months ago in reply to Sebastijan Sef

Thanks,

Of course I should have mementioned that NAM is the IdP, and the metadata is from the SP.
Are you saying the the metadata is missing vital information?

We have another system where this is running. I wanted to see if I could somehow export the metadata from the IdP configuration there, so I could compare them.

Do you think that can be done?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Nicolai Glahn 9 months ago in reply to Nicolai Glahn

Hi again,

Those metadata are from the test instance of the SP.
The production version actually looks more correct. Perhaps they have exposed the wrong data somehow
From prod: https://adgangsstyring.stoettesystemerne.dk/runtime/saml2auth/metadata.idp (there is an IDPSSODescriptor)
In the test system there is only a SPSSODescriptor

Thanks for the help.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Menu

Access Manager User Discussions

The XML is malformed - What is the problem?

Tags:

Top Replies

Verified Answer

Verified Answer

Resources