• Anna Ciszewska 9
  • NEWBIE
  • 0 Points
  • Member since 2022

  • Chatter
    Feed
  • 0
    Best Answers
  • 0
    Likes Received
  • 0
    Likes Given
  • 1
    Questions
  • 1
    Replies

I'm using standard Record list component in Experience builder with layout type - Compact, object - Case and filter - Recently Viewed Cases. The displayed fields are taken from the Primary Compact Layout set on the object but it won't show the values from some fields. User has access to them. Anyone knows where this behavior is coming from?

User-added imageUser-added image

I have setup salesforce as an IDP and I am using OIOSAML as a SP.

For the SP initiated flow, I am able to successfuly authenticate a user in salesforce. The SAML Response generated by SF IDP is missing the SessionIndex parameter under AuthnStatement element and I get the following error on the SP side.

========================

dk.itst.oiosaml.sp.model.validation.ValidationException: The assertion must contain a AuthnStatement@SessionIndex
    at dk.itst.oiosaml.sp.model.validation.OIOSAMLAssertionValidator.validate(OIOSAMLAssertionValidator.java:76) 
    at dk.itst.oiosaml.sp.model.OIOAssertion.validateAssertion(OIOAssertion.java:218) 
    at dk.itst.oiosaml.sp.service.SAMLAssertionConsumerHandler.handleSAMLResponse(SAMLAssertionConsumerHandler.java:146) 
    at dk.itst.oiosaml.sp.service.SAMLAssertionConsumerHandler.handlePost(SAMLAssertionConsumerHandler.java:94) 
    at dk.itst.oiosaml.sp.service.DispatcherServlet.doPost(DispatcherServlet.java:212) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) 
    at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:696) 
    at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1568) 
    at org.eclipse.jetty.websocket.server.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:164) 
    at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1539) 
    at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:524) 
    at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) 
    at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:568) 
    at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221) 
    at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1110) 
    at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:453) 
    at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:183) 
    at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1044) 
    at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) 
    at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:199) 
    at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:109) 
    at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97) 
    at org.eclipse.jetty.server.Server.handle(Server.java:459) 
    at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:280) 
    at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:229) 
    at org.eclipse.jetty.io.AbstractConnection$1.run(AbstractConnection.java:505) 
    at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:607) 
    at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:536) 
    at java.lang.Thread.run(Thread.java:744)

============

Here is the SAML Response from SF that I am receiving:


<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                Destination="http://1352.servehttp.com:8080/oiosaml.java-demo-11442/saml/SAMLAssertionConsumer"
                ID="_bfafde03fe6a2b3c1f36b707e2a207651392817292151"
                InResponseTo="_38e578ad-b45d-4d37-b937-bdfc19d6dbae"
                IssueInstant="2014-02-19T13:41:32.151Z"
                Version="2.0"
                >
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                 Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
                 >https://cws-dev-ed.my.salesforce.com</saml:Issuer>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:SignedInfo>
            <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
            <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
            <ds:Reference URI="#_bfafde03fe6a2b3c1f36b707e2a207651392817292151">
                <ds:Transforms>
                    <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                    <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                        <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
                                                PrefixList="ds saml samlp xs xsi"
                                                />
                    </ds:Transform>
                </ds:Transforms>
                <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                <ds:DigestValue>puH/vfNC5qswSqUCecyCm2xho64=</ds:DigestValue>
            </ds:Reference>
        </ds:SignedInfo>
        <ds:SignatureValue>
QPEeRb5S/YjoasiggVnFjPW9+SInaH50eO/Bm8N4kSAIN59JYUQtf/Adyk+LvjtIqekRscAm1SPJ
bhGQG3oJ41jACAF29JVmRvR9zUqgSkwySuPXKSgL4o9uzUQW7dhvEN8KQR3WGWbXi79NtksSgpk7
iouTOqD0pcyXO3PCz11TNpyzPeXQPvCdOfNUmq0Dup9s0/m8vACWQMUQ1j0Vj2esh4wkQKj8Trdl
n4Hfzj2PkUkYBIFNkXLoluxYYP5kERgGFqhlRSBS1P7iU+TbzDI4nOfQN0ZTEQOq96nihuqDtADH
EdDbSwtiGAilImXa9tHYw9s1gYIYsEZBNFvdIw==
</ds:SignatureValue>
        <ds:KeyInfo>
            <ds:X509Data>
                <ds:X509Certificate>MIIFWDCCBECgAwIBAgIDEMaFMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVTMRcwFQYDVQQK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</ds:X509Certificate>
            </ds:X509Data>
        </ds:KeyInfo>
    </ds:Signature>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
    </samlp:Status>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                    ID="_14943b60cd5397ff856a4e361c0e276e1392817292151"
                    IssueInstant="2014-02-19T13:41:32.151Z"
                    Version="2.0"
                    >
        <saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
                     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                     >https://cws-dev-ed.my.salesforce.com</saml:Issuer>
        <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <ds:SignedInfo>
                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
                <ds:Reference URI="#_14943b60cd5397ff856a4e361c0e276e1392817292151">
                    <ds:Transforms>
                        <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                        <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                            <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
                                                    PrefixList="ds saml xs"
                                                    />
                        </ds:Transform>
                    </ds:Transforms>
                    <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                    <ds:DigestValue>TrO7XBpzEdymHMOcbReB2WY2knI=</ds:DigestValue>
                </ds:Reference>
            </ds:SignedInfo>
            <ds:SignatureValue>
Mri0dKIFGVrDzTxiLx1T0bYvegdnQvx7qqVthnhmLPpzz5Q11xHMpUt+AXRXrX7W6S9r4A7T6ARN
QYOkG9wBIuNavJ87bGekPDgIGYR1bUzu5w3uGEVbBGCthineCZKquaSWwz+yOewdu/CpYQxsX7HP
V94vFNAv+eWasPNKnKcrui1VWptBrjqB8PqV4a91YeJRzoRQMgPOji+HT4EKiUulij6K917c51ZW
Gq+5OO6qsvJ1smscSjMzr+vX2NPHRYTp7P1Mh2Qo3Mr2mfhYMbM4rPE7k3ne9zjNaOZaR0w02pqB
nViAER6gPtv4I31e9Kh3H1drNeZr2j2p2x/C9w==
</ds:SignatureValue>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFWDCCBECgAwIBAgIDEMaFMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVTMRcwFQYDVQQK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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </ds:Signature>
        <saml:Subject xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
            <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">mamtaaz@gmail.com</saml:NameID>
            <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml:SubjectConfirmationData InResponseTo="_38e578ad-b45d-4d37-b937-bdfc19d6dbae"
                                              NotOnOrAfter="2014-02-19T13:46:32.152Z"
                                              Recipient="http://1352.servehttp.com:8080/oiosaml.java-demo-11442/saml/SAMLAssertionConsumer"
                                              />
            </saml:SubjectConfirmation>
        </saml:Subject>
        <saml:Conditions NotBefore="2014-02-19T13:41:32.152Z"
                         NotOnOrAfter="2014-02-19T13:46:32.152Z"
                         xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                         >
            <saml:AudienceRestriction>
                <saml:Audience>http://saml.1352.servehttp.com</saml:Audience>
            </saml:AudienceRestriction>
        </saml:Conditions>
        <saml:AuthnStatement AuthnInstant="2014-02-19T13:41:32.152Z"
                             xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                             >
            <saml:AuthnContext>
                <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
            <saml:Attribute Name="userId"
                            NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
                            >
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                     xsi:type="xs:anyType"
                                     >005i0000002dK8p</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="username"
                            NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
                            >
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                     xsi:type="xs:anyType"
                                     >mamtaaz@gmail.com</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="email"
                            NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
                            >
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                     xsi:type="xs:anyType"
                                     >mamtaaz@gmail.com</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="is_portal_user"
                            NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
                            >
                <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                                     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                     xsi:type="xs:anyType"
                                     >false</saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>
</samlp:Response>

Could you help me figure out how to fix this?

Thanks,
Nitin