Frequent Errors List

This is a list of frequent errors users experience, we hope to grow this list with more errors and more solutions.

Metadata not found.

This means that JANUS does not have any metadata about your service. This can be solved by waiting (yes, waiting). Or ensuring that the JANUS service has the correct metadata regarding your service. Try to import your XML again, or by verifying that all the values in JANUS match the ones you have set in your configuration.

Audience not a valid candidate.

Possible solutions:

1. Make sure you have 'redirect.sign' => TRUE, and 'redirect.validate' => TRUE in your metadata/saml20-idp-remote.php file for the identity provider you are using
2. Try to add NameIDConvention to your metadata and the metadata in JANUS. The following line should be added to your identity provider configuration. 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',

Exception: Destination in response doesn't match the current URL.

This was caused by an incorrect value in the NameIDFormat setting in JANUS metadata. Always check your metdata. This can also be caused by a wrong url being generated by simpleSAMLphp. To solve that you need to change some code in the simplesamlphp/lib/SimpleSAML/Utilities. The function selfURLNoQuery, needs to be rewritten to this:

public static function selfURLNoQuery() {
	$url = self::selfURL();
	$url = strtok($url, '?');
	return $url;
}

This will output correct urls for simplesamlphp, in case you have a rewrite rule, like has been described in installing simplesamlphp.

Note: See conversation about this integration in the simplesamlphp group