SHAREid - A local user session could not be created for the assertion
Problem: We have a client trying to federate to our environment using POST profile but we are getting the following error, "RECEIVER: ERROR: A local user session could not be created for the assertion".
I verified that the user exist in the directory and I am able to execute a test successfully as that user.
Thanks.
There is a requirement that the client needs to send an attribute called "traveler" in the assertion. We found out that the problem occurs only when client sends a attribute in the assertion. When the assertion does not include the attribute, there is no issue. Not sure why that is the case as we have other clients sending the same attribute in the assertion.
Here is the AttributeStatement.
<saml:AttributeStatement xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><saml:Subject><saml:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">XXXXXX</saml:NameIdentifier></saml:Subject><saml:Attribute AttributeName="XXXID" AttributeNamespace="http://schemas.xmlsoap.org/claims"><saml:AttributeValue>XXXXX</saml:AttributeValue></saml:Attribute></saml:AttributeStatement>
It does not have <saml:SubjectConfirmation> and <ConfirmationMethod> element. Can that be a problem?
Thanks,
Vinay
Edited by: user504421 on Jul 9, 2009 2:17 PM
Similar Messages
-
COREid Federation Error: A local user session could not be created for the
Hi,
I installed two instances of COREid Federation in my machine. Also installed SiteMinder and LDAP. Source Domain of COREid (8101) uses LDAP as IdMBridge and Destination Domain (9101) uses SiteMinder as IdMBridge. I am trying to access the resource protected by the SiteMinder from the source domain using the URL which is constructed using the pattern given in the PDF:
http://mymachine.domain.com:8101/shareid/saml/ObSAMLTransferService?DOMAIN=DestinationDomain&method=POST&TARGET=http://mymachine.domain.com:8887/Source/Source.html
Assertions are generated and I can see the assertion in the Source domain and transferred to the Destination Domain.
I get the following error in the Destination Domain Shareid Log file:
ERROR - [http10113-Processor3] - RECEIVER: ERROR: A local user session could not be created for the assertion
Please help me to solve this issue?
Note: The Web agent runs on the web server instance 8887.
SiteMinder is able to protect the resource when accessed.Typically that error occurs when the destinations access management system can't find the user based on the SAML attribute. Check to make sure that the attribute that you are matching on matches exactly.
-
ORA-20100: AppDomain could not be created for the specified security level
We recently updated our development environment to Visual Studio 2010. We have previously deployed (with success) .Net stored procedures from Visual Studio 2005 to our Oracle 10gR2 database. I am currently trying to configure a local instance (called local) of Oracle 10gR2 database to test deployment of .Net stored procedures to Oracle 10gR2 via Visual studio 2010 and ODT version 11.2.0.1.2. I have built the demo from the ode developer guide and gotten as far as deploying it but executing the stored procedures from VS 2010 or SQL*Plus produces the following error...
ORA-20100: AppDomain could not be created for the specified security level
ORA-06512: at "SYS.DBMS_CLR", line 152
ORA-06512: at "SCOTT.GETDEPTNO", line 7
Here is what I have done.
(Server)
1. Installed oracle 10gR2 with ODE.Net
2. Installed Oracle 10gR2 patch set 22
3. Installed ODE upgrade from Oracle Developer Tools for Visual Studio .NET with Oracle 10g Release 2 ODAC 10.2.0.2.21
(Client)
4. Installed Oracle Developer Tools for Visual Studio .NET with Oracle 10g Release 2 ODAC 10.2.0.2.21 (In new client home).
5. Installed patch set 22 on 10g client home.
6. Installed Oracle 11g Release 2 ODAC 11.2.0.1.2 with Oracle Developer Tools for Visual Studio(in new 11g client home, only for VS 2010)
I have made some minor changes (GAC) etc. per the following threads...
ODE.NET 11.1.0.7.20 on 10g Database?!
Re: Error: System.TypeInitializationException
The database appears to be fully functional via TOAD - SQL plus etc. I can't find much on this error but it appears Oracle needs some permissions to launch an ASP.Net application that it does not have. Any help would be GREATLY appreciated, don't hesitate to ask for additional details.The KB article is almost what we have apart from theitalic underlined
part
Consider the following scenario:
You use a domain administrator account to log on to a computer that is running Windows 7 or Windows Server 2008 R2.
You use the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in to connect to a domain controller.
You open the Properties dialog box of a user account.
The user account has sole access to a shared folder path that cannot be accessed by the administrator account.
You set the Remote Desktop Services Home Folderattribute to the shared folder path.
NoteThis attribute is located on the
Remote Desktop Services Profiletab.
You click Apply or OK.
In this scenario, you receive the following error message:
The home folder could not be created because: The network name cannot be found.
Note If you click Apply or OK again, no error message is returned. However, the setting is not saved.
I think the important bit is
The user account has sole access to a shared folder path that cannot be accessed by the administrator account.
We manually create the shares on our NAS and then just want to enter the path in the profile tab, I suppose the question is how to we stop it trying to create the shares ? -
ITunes could not back up the iPhone because a session could not be started with the iPhone
Hi
I have just updated to iTunes 10.7.(oh it just scrolled off the screen give me 5 minutes for it to come back again) 10.7.0.21 - the latest version
I run Win7 64bit & during installation i got the blue-screen of death & windows crashed
I went to apple website & downloaded iTunes manually & installed (it tried to install in the (x86) folder as usual, so i forced it into the 64 bit program folder like i always have to do.
It now runs fine but when ever i sync in get the error "iTunes could not back up the '' iPhone because a session could not be started with the iPhone"
I have tried deleting the existing backup as suggested in the forums but that didn't solve the problem, and now i have no backups at all
I have restarted the iPhone & the computer but the error is still the same.
PS i have "Encypt local backup" selected, if i try to unselect that option at the moment it says my password is incorrect, my password is correct, i made a record of it & know exactly what password i used but iTunes is saying it is wrong, is this because i have no backups at the moment or is iTunes completely broken
I have also tried to backup to iCloud as a temporary measure but it says i don't have enough space so must buy some!
Any help would be appreciatedCould be that iTune can't read your latest backup file. You might have to delete it, follow this article to find out how to delete the backup from the list: iTunes: "Backup could not be saved on the computer" alert message
-
A session could not be started with the ipod
My ipod touch 3 won't sync. I get a message that says "itunes could not back up the ipod "xxx" because a session could not be started with the ipod." I tried the recommendation of going to edit-->preferences-->devices and deleting the 'back up' file, but there IS no back up file. I've updated my security software. I've run the diagnostic for syncing and it said it passed. I've shut off and restarted my ipod. Not sure what else to do. Don't really want to restore to original settings.
I had this problem and found the solution (for me anyway). After looking in Logs I found a lot of "could not create file in All Users/Lockdown". On this XP computer it is here (and hidden):
C:\Documents and Settings\All Users\Application Data\Apple
So I moved the files in the Lockdown folder out of there. Then I got another error about the "pairing record missing" and searching that, found to move the .plist files out of the Preferences directory (all of the above with iTunes shut down i.e. not running of course). These were located here:
C:\Documents and Settings\Joanne\Application Data\Apple Computer\Preferences
Then I launched iTunes and all was well again. Maybe you can just delete the .plists out of Preferences, I dunno.
Hope this helps you or anyone else searching on this somewhat maddening problem. I encountered the trouble upon updating iTunes to 10.5 and then trying to sync my iPod Touch v4.3.1. The backup has to work of course before I can update to iOS 5.0. -
What do I do about message:- iTunes could not back up iPhone because a session could not be started with the iPhone.
Read https://discussions.apple.com/thread/5010662?start=0&tstart=0
-
Session could not be started for back up.
I have an iPad 4, iPod touch 3, and iPod touch 4 all connected to my itunes. They will all sync OK but I get an error message for each one saying "iTunes could not back up iPad because a session could not e started with the iPad. I have made sure that I only have one backup file for each in my preferences. I have turned the devices off and rebooted my computers. The software for the devices and iTunes is up to date. I'm running out of ideas to try to fix this. I currently have back ups set to save to my computer and I have over 600 Gigs of free space. I tried saving it to iCloud but got the same errors. I'm running on Windows computer using Windows 7.
You may also want to delete every backup for 1 device, like the ipod touch 3rd gen, and try to backup. If it works try the other devices the same way. If not, some other things to try is: turn off automatic sync, reset the sync history, and hard reset the device, then plug in and try to backup right away.
-
Since 2 updates I started getting iTunes could not back up the iPhone 'my IPhone' because a session could not be started with the iPhone. This is happening with my iPad and iPhone. I see hundreds of complains on this issue starting from last year and obviously Apple has no clue how to solve this error. I went through the solutions and spend over an hour deleting backups resetting lockdown, restarting and nothing is working. Are they serious to ask us to disconnect all other USB devices to sync our equipment everyday to solve their problem? iTunes is the worst program I have seen on the market in the past 10 years. It reminds me of DOS programs that could only do one item at a time. You click a command and just wait and wait and wait. Of course they want me to call customer service, wait for x time to talk to tech support and then spend more time. I don't have the time. I spent a lot of money to get an equipment that should work as advertised and not spend further my valuable time. I have reached my limit with Apple and that crap iTunes. I'm calling for a divorce.
[By the way, your spell check doesn't recognize your own products such as iPad, iTunes and iPhone. Such an embarrassing company.]Do you happen to be running any processes that Apple doesn't want you to use? (Jailbroken?)
-
I want to backup my phone before upgrading to ios5 but I get an error message: itunes could not back up the iphone because a session could not be started with the iphone. I want to go to ios5, but I do not want to lose everything. I've gone to my device under preferences and I have no backup currently.
I have a Verizon Iphone 4 and a PC.
Please help me..Hi Judy,
Im using windows 7 and im not a computer wizard, i've tried the method by using the instruction for Win7 but it does not work, same problem still exist.
Could uninstall itunes and reinstall it back on my pc fix my problem, please advise...... Many Thanks!
VBR,
ray -
Itunes could not restore the iphone because a session could not be started with the iphone
Recently I sent my iPhone 5 to apple service centre as my phone could not turn on and stuck at apple logo. The technician use DFU restore and successfully reboot my phone. However, all my data and content are being erased. Now I tied to restore from my back up using iTunes 12.1.0.71 with iPhone 5 iOS 8.1.3, error message pop up. itunes could not restore the iphone because a session could not be started with the iphone. However, I still can sync my iPhone to iTunes. I am so frustrated as I need to get all my contact back from my previous back up. Please help. Thanks.
Hello brendalhl,
After reviewing your post, it sounds like a session could not be started to restore from a backup. I would recommend that you read this article, it may be able to help the issue.
If you can't back up or restore your iPhone, iPad, or iPod using iTunes - Apple Support
"... a session could not be started."
Thanks for using Apple Support Communities.
Have a nice day,
Mario -
My ipod won't sync to my itunes. Keeps coming up with the error message 'itunes can not back up the ipod because a session could not be started with the ipod? it has been coming up with this message for the lst 2 weeks now. Will let me charge it but won't let me sync anything. Really not sure what to do or where to start or anything!
Follow these instructions to completely remove Apple software
http://support.apple.com/kb/HT1923
Then use free Ccleaner to repeatly repair your registry until it's fixed.
http://www.piriform.com/ccleaner/download/standard
download iTunes again from Apple.
http://www.apple.com/itunes/
If you have 64bit Vista or Windows 7, look for the seperate download of iTunes for that further down the page.
Once installed, use the Apple Software Update under your Start Menu to fully update all Apple components.
Your content will remain on the drive in the Music > iTunes Folder, nothing is deleted.
You should be making backups of your content regularly, either through iTunes or via copying the iTunesFolder in your Music folder to a external drive.
Windows is notorious for having "other" issues that make it unstable, we as volunteers helping others can't always resolve those issues. -
I restored my iPhone and when sync with iTunes is in progress I receive the error message "iTunes could not back up the iPhone because a session could not be started with the iPhone." Any suggestions on what to do?
Hi Judy,
Im using windows 7 and im not a computer wizard, i've tried the method by using the instruction for Win7 but it does not work, same problem still exist.
Could uninstall itunes and reinstall it back on my pc fix my problem, please advise...... Many Thanks!
VBR,
ray -
When synching by 4th gen ipod touch it skips the first step - backup-, does steps 2 through 5, then I get a message the ipod could not be backed up because a session could not be started with the ipod. How do I fix this? Do I have to restore my ipod? Will all my apps be erased?
You have to have an internet connection, either wireless or through a computer with iTunes. When you choose Software Update you can only update to the latest version for your iPod Touch, iOS 6.1.6
-
Our home folders are stored on a non-windows NAS device and with Windows XP and 2003 we've always got the above error when creating or modifying users home folders, even when the shares were al ready created and being used.
However this was never really a big issue as the error that popped up was really for information and finshed with a "we've modified the user properties anyway, please create the share manually" type message.
Unfortunately now we are moving to windows 7 and 2008R2, this last part of the the message is missing and it won't accept the correct value.
This issue may be in the way that the NAS device shares the folder, as only the username that matches the folder name can access the share. This behaviour can't be modified.
Is there a way to get Windows 7/2008R2 AD users and computers to behave the same way that Windows XP/2003 does , i.e. don't try and create the share just set the value in the user properties ?
The AD is still at 2003 level and we can still use Windows XP/2003 clients to make the changes but this is a bit of a limitation.The KB article is almost what we have apart from theitalic underlined
part
Consider the following scenario:
You use a domain administrator account to log on to a computer that is running Windows 7 or Windows Server 2008 R2.
You use the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in to connect to a domain controller.
You open the Properties dialog box of a user account.
The user account has sole access to a shared folder path that cannot be accessed by the administrator account.
You set the Remote Desktop Services Home Folderattribute to the shared folder path.
NoteThis attribute is located on the
Remote Desktop Services Profiletab.
You click Apply or OK.
In this scenario, you receive the following error message:
The home folder could not be created because: The network name cannot be found.
Note If you click Apply or OK again, no error message is returned. However, the setting is not saved.
I think the important bit is
The user account has sole access to a shared folder path that cannot be accessed by the administrator account.
We manually create the shares on our NAS and then just want to enter the path in the profile tab, I suppose the question is how to we stop it trying to create the shares ? -
when i try to update to 6.0, itunes says "itunes could not back up the iphone "****** iphone" because a session could not be started with the iPhone? help?
i hope you have 30 dollars to blow on top of what you already spent on your ipod....because thats what apple wants to answer your question ...if its out of warranty
Maybe you are looking for
-
Error while opening the web page
Hi, i am trying to start the srm login page using web. with the service BBPSTART..its not opening it shows ' Firefox can't establish a connection to the server at xxxx.xxx'. what might be the problem... kindly help me with it... thx.
-
The upgrade of creative cloud is not possible because there is always the error code 204?
The upgrade of creative cloud is not possible because there is always the error code 204?
-
I tried downloading iPhoto library manager as suggested by a pervious post, but even with Safari and Firefox it will not download. The dmg image disappears before I can click on it and I get a command that says "it does not work with this architectu
-
Preview crashing on yosemite whenever i open a pdf file
preview crashing on yosemite whenever i open a pdf file Hi, Ever since i updated to yosemite my preview app keeps crashing every time I open a PDF file. Can anyone figure this out ? Here is the crash report: Process: Preview [10399] Path:
-
IOS AIR3.6 runtime error 3747 Multiple application domains are not supported on this operating syst
3747 Multiple application domains are not supported on this operating system. I'm getting this error from an IOS app compiled with air 3.6. No code has changed from Air 3.5 which is error free. Web app / android versions of the same codebase do not