Sun OpenSSO Enterprise 8.0 Administration Reference

SAML 1.x

Table 10–10 Log Reference Document for SAMLLogMessageIDs

Id

Log Level

Description

Data

Triggers

Actions

SAML-1 

INFO 

New assertion created 

message id 

Assertion ID or Assertion if log level is LL_FINER 

Browser Artifact Profile 

Browser POST Profile 

Create Assertion Artifact 

Authentication Query 

Attribute Query 

Authorization Decision Query 

  

SAML-2 

INFO 

New assertion artifact created 

message id 

Assertion Artifact 

ID of the Assertion corresponding to the Artifact 

Browser Artifact Profile 

Creating Assertion Artifact 

  

SAML-3 

FINE 

Assertion artifact removed from map 

message id 

Assertion Artifact 

SAML Artifact Query 

Assertion artifact expires 

  

SAML-4 

FINE 

Assertion removed from map 

message id 

Assertion ID 

SAML Artifact Query 

Assertion expires 

  

SAML-5 

INFO 

Access right by assertion artifact verified 

message id 

Assertion Artifact 

SAML Artifact Query 

  

SAML-6 

INFO 

Authentication type configured and the actual SOAP protocol do not match. 

message id 

SAML SOAP Query 

Login to console, go to Federation, then SAML, edit the Trusted Partners Configuration, check the selected Authentication Type field, make sure it matches the protocol specified in SOAP URL field.  

SAML-7 

INFO 

Invalid authentication type 

message id 

SAML SOAP Query 

Login to console, go to Federation, then SAML, edit the Trusted Partners Configuration, select one of the values for Authentication Type field, then save.  

SAML-8 

FINE 

Remote SOAP receiver URL 

message id 

SOAP Receiver URL 

SAML SOAP Query 

  

SAML-9 

INFO 

No assertion present in saml response 

message id 

SAML Response 

SAML Artifact Query 

Contact remote partner on what's wrong 

SAML-10 

INFO 

Number of assertions in SAML response does not equal to number of artifacts in SAML request. 

message id 

SAML Response 

SAML Artifact Query 

Contact remote partner on what's wrong 

SAML-11 

INFO 

Artifact to be sent to remote partner 

message id 

SAML Artifact 

SAML Artifact Query 

  

SAML-12 

INFO 

Wrong SOAP URL in trusted partner configuration 

message id 

SAML Artifact Query 

Login to console, go to Federation, then SAML, edit the Trusted Partners Configuration, enter value for SOAP URL field, then save.  

SAML-13 

FINE 

SAML Artifact Query SOAP request 

message id 

SAML Artifact Query message 

SAML Artifact Query 

  

SAML-14 

INFO 

No reply from remote SAML SOAP Receiver 

message id 

SAML Artifact Query 

Check remote partner on what's wrong 

SAML-15 

FINE 

SAML Artifact Query response 

message id 

SAML Artifact Query response message 

SAML Artifact Query 

  

SAML-16 

INFO 

No SAML response inside SOAP response 

message id 

SAML Artifact Query 

Check remote partner on what's wrong 

SAML-17 

INFO 

XML signature for SAML response is not valid 

message id 

SAML Artifact Query 

Check remote partner on what's wrong on XML digital signature 

SAML-18 

INFO 

Error in getting SAML response status code 

message id 

SAML Artifact Query 

Check remote partner on what's wrong on response status code 

SAML-19 

INFO 

TARGET parameter is missing from the request 

message id 

SAML Artifact Profile 

SAML POST Profile 

Add "TARGET=target_url" as query parameter in the request 

SAML-20 

INFO 

Redirection URL in SAML artifact source site 

message id 

target 

redirection URL 

SAML response message in case of POST profile and log level is LL_FINER 

SAML Artifact Profile source 

SAML POST Profile source 

  

SAML-21 

INFO 

The specified target site is forbidden 

message id 

target URL 

SAML Artifact Profile source 

SAML POST Profile source 

TARGET URL specified in the request is not handled by any trusted partner, check your TARGET url, make sure it matches one of the Target URL configured in trusted partner sites 

SAML-22 

INFO 

Failed to create single-sign-on token 

message id 

SAML Artifact Profile destination 

SAML POST Profile destination 

Authentication component failed to create SSO token, please check authentication log and debug for more details 

SAML-23 

INFO 

Single sign on successful, access to target is granted 

message id 

Response message in case of POST profile and log levele is LL_FINER or higher 

SAML Artifact Profile destination 

SAML POST Profile destination 

  

SAML-24 

INFO 

Null servlet request or response 

message id 

SAML Artifact Profile 

SAML POST Profile 

Check web container error log for details 

SAML-25 

INFO 

Missing SAML response in POST body 

message id 

SAML POST Profile destination 

Check with remote SAML partner to see why SAML response object is missing from HTTP POST body 

SAML-26 

INFO 

Error in response message 

message id 

SAML POST Profile destination 

Unable to convert encoded POST body attribute to SAML Response object, check with remote SAML partner to see if there is any error in the SAML response create, for example, encoding error, invalid response sub-element etc. 

SAML-27 

INFO 

Response is not valid 

message id 

SAML POST Profile destination 

recipient attribute in SAML response does not match this site's POST profile URL 

Response status code is not success 

SAML-28 

INFO 

Failed to get an instance of the message factory 

message id 

SAML SOAP Receiver init 

Check your SOAP factory property (javax.xml.soap.MessageFactory) to make sure it is using a valid SOAP factory implementation 

SAML-29 

INFO 

Received Request from an untrusted site 

message id 

Remote site Hostname or IP Address 

SAML SOAP Queries 

Login to console, go to Federation, then SAML service, edit the Trusted Partners Configuration, check the Host List field, make sure remote host/IP is one the values. In case of SSL with client auth, make sure Host List contains the client certificate alias of the remote site. 

SAML-30 

INFO 

Invalid request from remote partner site 

message id and request hostname/IP address 

return response 

SAML SOAP Queries 

Check with administrator of remote partner site 

SAML-31 

FINE 

Request message from partner site 

message id and request hostname/IP address 

request xml 

SAML SOAP Queries 

  

SAML-32 

INFO 

Failed to build response due to internal server error 

message id 

SAML SOAP Queries 

Check debug message to see why it is failing, for example, cannot create response status, major/minor version error, etc. 

SAML-33 

INFO 

Sending SAML response to partner site 

message id 

SAML response or response id 

SAML SOAP Queries 

  

SAML-34 

INFO 

Failed to build SOAP fault response body 

message id 

SAML SOAP Queries 

Check debug message to see why it is failing, for example, unable to create SOAP fault, etc.