No SAML2 Provider Information Found for SP

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Using the SP Initiated login, User receive a 403 error and No SAML2 provider information found for SP in the affwebserv.log file.

For JCE,  When checked for java.security file and it shows crypto.policy=unlimited in java instance.

An IDP initiated login is successful.

Environment

Policy Server Version: All Supported Versions

Cause

There was a mismatch between the SPID the Service Provider was sending in the authnrequest versus the SPID configured within the Identity Provider.

Resolution

The SPID value sent by the SP in an authnrequest must match exactly the SPID value configured at the IDP.