<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"Préformaté HTML Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{mso-style-priority:99;
font-family:"Courier New";}
span.PrformatHTMLCar
{mso-style-name:"Préformaté HTML Car";
mso-style-priority:99;
mso-style-link:"Préformaté HTML";
font-family:"Courier New";
mso-fareast-language:FR;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hello all, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Just to tell you, that I found a solution of my SAML connection problem.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">On SAML mini site, I saw that metadata was expired and the certificate in the metadata I got on the Zendto Server with the refresh was not the same I found in the metadata on Azure AD.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">So as I was not sure about which certificate is which :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">1/ I generated a new one on Zendto with the command provided in the documentation :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#222222;background:#EBEBEB">You can use a self-signed certificate for this. Run this as root, and it will generate the certificate and private key files for you:</span><span style="font-family:"Tahoma",sans-serif;color:#222222"><br>
</span><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB">openssl req -newkey rsa:3072 -new -x509 -days 3652 -nodes -out /opt/zendto/simplesamlphp/cert/saml.crt -keyout /opt/zendto/simplesamlphp/cert/saml.pem<o:p></o:p></span></tt></p>
<p class="MsoNormal"><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB"><o:p> </o:p></span></tt></p>
<p class="MsoNormal"><span style="color:#1F497D">2/ And I ran the command to fetch the IdP metadata for the first time provided in the Zendto documentation :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#222222;background:#EBEBEB">Replacing '</span><tt><i><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;background:#EBEBEB">IDP-METADATA-URL</span></i></tt><span style="font-family:"Tahoma",sans-serif;color:#222222;background:#EBEBEB">'
with the App Federation Metadata Url you just copied from Azure, run this command:</span><span style="font-family:"Tahoma",sans-serif;color:#222222"><br>
</span><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB">/opt/zendto/simplesamlphp/modules/metarefresh/bin/metarefresh.php -s '<i>IDP-METADATA-URL</i>'<o:p></o:p></span></tt></p>
<p class="MsoNormal"><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB"><o:p> </o:p></span></tt></p>
<p class="MsoNormal"><span style="color:#1F497D">3/ Then I did fetch of the metadata with this script :
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#222222"><br>
</span><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB">/opt/zendto/sbin/refresh_saml_metadata.sh<o:p></o:p></span></tt></p>
<p class="MsoNormal"><tt><span style="font-size:10.0pt;font-family:"Lucida Console";color:#222222;border:none windowtext 1.0pt;padding:0cm;background:#EBEBEB"><o:p> </o:p></span></tt></p>
<p class="MsoNormal"><span style="color:#1F497D">Connection to Zendto works fine now once again.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I think, the first step is not necessary, but as I executed it, I thought, I’d better mention it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Best regards, <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:9.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Marita HILLENBRAND</span></b><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:8.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Service Informatique</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR">Centre Administratif et Technique</span></b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><br>
130, avenue Charles de Gaulle - 91230 Montgeron<br>
Tél : 01 70 58 93 40 Port : 06 24 04 43 58</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><br>
<a href="https://www.montgeron.fr/"><span style="color:#0563C1">www.montgeron.fr</span></a></span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><img border="0" width="128" height="79" style="width:1.3333in;height:.8229in" id="_x0000_i1027" src="cid:image001.jpg@01D7FCA6.92F465A0"></span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#3B5868"><br>
</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous
est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.</span></i><span style="font-size:12.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#1F497D;mso-fareast-language:FR"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="mso-fareast-language:FR">De :</span></b><span style="mso-fareast-language:FR"> ZendTo <zendto-bounces@zend.to>
<b>De la part de</b> HILLENBRAND Marita via ZendTo<br>
<b>Envoyé :</b> mardi 28 décembre 2021 15:05<br>
<b>À :</b> ZendTo Users <zendto@zend.to><br>
<b>Cc :</b> HILLENBRAND Marita <m.hillenbrand@montgeron.fr><br>
<b>Objet :</b> Re: [ZendTo] SAML Connection error on ZendTo<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Hello all, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Sorry to get back to you, but does anyone else use SAML connection with Microsoft Azure AD and recently had a problem?
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I’m still stuck with the error message below and I believe it’s not due to an update, because the problem’s still present after rollback. I’m not a developper and more like a newbe. I verified my SAML configuration
files and the script to refresh metadata works fine. I can’t find a solution on the web.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">If anybody has a clue what’s wrong, I’d be grateful.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Best regards, <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:9.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Marita HILLENBRAND</span></b><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:8.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Service Informatique</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR">Centre Administratif et Technique</span></b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><br>
130, avenue Charles de Gaulle - 91230 Montgeron<br>
Tél : 01 70 58 93 40 Port : 06 24 04 43 58</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><br>
<a href="https://www.montgeron.fr/">www.montgeron.fr</a><br>
</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><img border="0" width="128" height="79" style="width:1.3333in;height:.8229in" id="_x0000_i1025" src="cid:image005.jpg@01D7FCA5.1E7B9D20"></span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#3B5868"><br>
</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous
est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.</span></i><span style="font-size:12.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#1F497D;mso-fareast-language:FR"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="mso-fareast-language:FR">De :</span></b><span style="mso-fareast-language:FR"> HILLENBRAND Marita
<br>
<b>Envoyé :</b> mardi 7 décembre 2021 11:20<br>
<b>À :</b> ZendTo Users <<a href="mailto:zendto@zend.to">zendto@zend.to</a>><br>
<b>Objet :</b> SAML Connection error on ZendTo<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello all, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I get the following error when trying to connect to Zendto, also there were no changes made on the server :<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:.75pt"><span style="font-size:10.0pt;font-family:"Times New Roman",serif;mso-fareast-language:FR">SimpleSAML\Error\Error: UNHANDLEDEXCEPTION<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">Backtrace:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">1 www/_include.php:17 (SimpleSAML_exception_handler)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">0 [builtin] (N/A)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">Caused by: SimpleSAML\Error\Exception: Could not find the metadata of an IdP with entity ID 'https://sts.windows.net/<span style="color:#BFBFBF">xyxyxyxyxy</span>/'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">Backtrace:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">8 modules/saml/lib/Auth/Source/SP.php:315 (SimpleSAML\Module\saml\Auth\Source\SP::getIdPMetadata)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">7 modules/saml/lib/Auth/Source/SP.php:720 (SimpleSAML\Module\saml\Auth\Source\SP::startSSO)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">6 modules/saml/lib/Auth/Source/SP.php:826 (SimpleSAML\Module\saml\Auth\Source\SP::authenticate)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">5 lib/SimpleSAML/Auth/Source.php:208 (SimpleSAML\Auth\Source::initLogin)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">4 lib/SimpleSAML/Auth/Simple.php:167 (SimpleSAML\Auth\Simple::login)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">3 lib/SimpleSAML/Auth/Simple.php:109 (SimpleSAML\Auth\Simple::requireAuth)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">2 modules/core/www/as_login.php:33 (require)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">1 lib/SimpleSAML/Module.php:260 (SimpleSAML\Module::process)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR">0 www/module.php:10 (N/A)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:FR"><o:p> </o:p></span></p>
<p class="MsoNormal">I recently updated Zendto, but I teste dit afterwards and it worked fine.
<o:p></o:p></p>
<p class="MsoNormal">I tried to search on the web and had a look into the SAML configuration files, but I must admit that I have no clue what’s wrong.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Has anybody an idea ? Thanks a lot, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:9.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Marita HILLENBRAND</span></b><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:8.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Service Informatique</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:105%;background:white">
<b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR">Centre Administratif et Technique</span></b><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><br>
130, avenue Charles de Gaulle - 91230 Montgeron<br>
Tél : 01 70 58 93 40 Port : 06 24 04 43 58</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><br>
<a href="https://www.montgeron.fr/">www.montgeron.fr</a><br>
</span><span style="font-family:"Verdana",sans-serif;color:#4F758B"><br>
</span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B;mso-fareast-language:FR"><img border="0" width="128" height="79" style="width:1.3333in;height:.8229in" id="Image_x0020_5" src="cid:image006.jpg@01D7FCA5.1E7B9D20"></span><span style="font-size:7.5pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#3B5868"><br>
</span></i><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#4F758B">Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous
est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.</span></i><span style="font-size:12.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#1F497D;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>