Hi,

I noticed that for some reason simpleSAMLphp is bypassing the SSO page
and it's not asking for the user credentials. I haven't come across
this problem before, I'll let you know if I find any information about
this.

Please make sure that your startpage is active, also it would be good
to try disabling the custom URL for the startpage to see if that is
related to the problem.

I recommend you also to post on the simpleSAMLphp group:
http://groups.google.com/group/simplesamlphp

Cheers,
Julian

On Aug 26, 11:21 am, Arcimboldo <[EMAIL PROTECTED]> wrote:
> Hi google,
> We have a domain registered in google apps (ictp.it), and we
> successfully activated SSO using simplesamlphp.
> SSO works fine if I try to access calendar or docs apps, either using
> the full url (e.g.http://www.google.com/calendar/hosted/ictp.it/render)
> or our url (http://cal.ictp.it). The browser is redirected to our sso
> page and after the login it is redirected to the calendar. Once a
> login is successfull I can access any googleapps page (the start page,
> the calendar, docs etc.)
>
> However, if I'm not logged in if I try to open the start page (http://
> start.ictp.it) I'm redirected to the SSO page that return (correctly,
> AFAIK) a SAML response containing the following status:
>
>   <samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:
> 2.0:protocol">
>         <samlp:StatusCode xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> Value="urn:oasis:names:tc:SAML:2.0:status:NoPassive">
>         </samlp:StatusCode>
>   </samlp:Status>
>
> but the start page returns an error:
>
>     This account cannot be accessed because your credentials were not
> verified.
>
>     We are unable to process your request at this time, please try
> again later.
>
> How can I fix this?
> thanks in advance
> .a.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to