<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Oh, ok if I mis-understood then, yes a SAML trace would be good, as well as knowing is this new or did it work. Seems similar to what I have seen in UCCE with the packet stuff not signed or wrong encryption type… course thats UCCE vs CUCM, but usually cucm just works…<div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Sep 16, 2021, at 6:45 PM, Johnson, Tim <<a href="mailto:johns10t@cmich.edu" class="">johns10t@cmich.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Nah, looks like he said logging into CCM Admin pages, with AD accounts, so all areas of the web UI (I believe). The NTP errors that I’ve seen are presented as SAML assertion errors.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I’m curious if this is a new SSO config, or if it was working properly and something’s changed.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip-bounces@puck.nether.net</a>><span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>Kent Roberts<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Thursday, September 16, 2021 8:37 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com" style="color: blue; text-decoration: underline;" class="">MLoraditch@heliontechnologies.com</a>><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>[External] Re: [cisco-voip] Error Processing SAML Response<o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Remember he said it also was happening on the CUCM Admin account which has nothing to do with SSO/SAML. So means its most likely internal to cucm...<o:p class=""></o:p></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><br class=""><br class=""><o:p class=""></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On Sep 16, 2021, at 4:36 PM, Matthew Loraditch <<a href="mailto:MLoraditch@heliontechnologies.com" style="color: blue; text-decoration: underline;" class="">MLoraditch@heliontechnologies.com</a>> wrote:<o:p class=""></o:p></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; background-color: white;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">The logs are pretty clear when its a time difference as the error. I’ve not seen it randomly occur but definitely the error will be it’s time and may even show the difference. </span><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; background-color: white;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; background-color: white;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">Its the 4j log file for sso I believe </span><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""></o:p></span></div></div></div><div id="ms-outlook-mobile-signature" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""> </o:p></span></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">Get<span class="apple-converted-space"> </span><a href="https://aka.ms/o0ukef" style="color: blue; text-decoration: underline;" class="">Outlook for iOS</a><o:p class=""></o:p></span></div></div></div><div class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="934" style="width: 700.5pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td style="padding: 0in 7.5pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 1pt;" class=""> <o:p class=""></o:p></span></div></td><td style="padding: 7.5pt 0in 7.5pt 7.5pt;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="487" style="width: 365.15pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="color: rgb(243, 128, 11);" class="">Matthew Loraditch</span></b><b class=""><span style="font-size: 1pt; font-family: remialcxesans, serif; color: white;" class=""></span></b><b class=""><span style="color: rgb(243, 128, 11);" class=""><o:p class=""></o:p></span></b></div></td></tr></tbody></table></td></tr><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="color: gray;" class="">Sr. Network Engineer<o:p class=""></o:p></span></b></div></td></tr><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="color: gray;" class="">(He/Him/His)<o:p class=""></o:p></span></b></div></td></tr></tbody></table></td></tr><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 7.5pt 0in 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(243, 128, 11);" class="">p:</span><span style="color: gray;" class=""> <a href="tel:443.541.1518" target="_blank" style="color: blue; text-decoration: underline;" class=""><strong class=""><span style="font-family: Calibri, sans-serif; color: gray; font-weight: normal; text-decoration: none;" class="">443.541.1518</span></strong></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td></tr></tbody></table></td></tr><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(243, 128, 11);" class="">w:</span><span style="color: gray;" class=""> <a href="http://www.heliontechnologies.com/" target="_blank" style="color: blue; text-decoration: underline;" class=""><strong class=""><span style="font-family: Calibri, sans-serif; color: gray; font-weight: normal; text-decoration: none;" class="">www.heliontechnologies.com</span></strong></a><o:p class=""></o:p></span></div></td><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: gray;" class=""> | <o:p class=""></o:p></span></div></td><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="color: rgb(243, 128, 11);" class="">e:</span><span style="color: gray;" class=""> <a href="mailto:MLoraditch@heliontechnologies.com" target="_blank" style="color: blue; text-decoration: underline;" class=""><strong class=""><span style="font-family: Calibri, sans-serif; color: gray; font-weight: normal; text-decoration: none;" class="">MLoraditch@heliontechnologies.com</span></strong></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td></tr><tr class=""><td style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="bottom" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 1pt;" class=""><a href="http://www.heliontechnologies.com/" target="_blank" style="color: blue; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><image657209.png></span></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td></tr><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="487" style="width: 365.15pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 7.5pt 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="18" style="width: 13.5pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center;" class=""><span style="font-size: 1pt;" class=""><a href="https://facebook.com/heliontech" target="_blank" style="color: blue; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><image487691.png></span></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="21" style="width: 15.75pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in 2.25pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center;" class=""><span style="font-size: 1pt;" class=""><a href="https://twitter.com/heliontech" target="_blank" style="color: blue; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><image529913.png></span></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td><td valign="top" style="padding: 0in;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="21" style="width: 15.75pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0in 2.25pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center;" class=""><span style="font-size: 1pt;" class=""><a href="https://www.linkedin.com/company/helion-technologies" target="_blank" style="color: blue; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><image776611.png></span></a><o:p class=""></o:p></span></div></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></div><div class="MsoNormal" align="center" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center;"><hr size="2" width="915" align="center" style="width: 686.5pt;" class=""></div><div id="divRplyFwdMsg" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="apple-converted-space"> </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip-bounces@puck.nether.net</a>> on behalf of Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca" style="color: blue; text-decoration: underline;" class="">lelio@uoguelph.ca</a>><br class=""><b class="">Sent:</b><span class="apple-converted-space"> </span>Thursday, September 16, 2021 4:32:12 PM<br class=""><b class="">To:</b><span class="apple-converted-space"> </span>Jonathan Charles <<a href="mailto:jonvoip@gmail.com" style="color: blue; text-decoration: underline;" class="">jonvoip@gmail.com</a>>; Benjamin Turner <<a href="mailto:benmturner@hotmail.com" style="color: blue; text-decoration: underline;" class="">benmturner@hotmail.com</a>><br class=""><b class="">Cc:</b><span class="apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a><span class="apple-converted-space"> </span><<a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a>><br class=""><b class="">Subject:</b><span class="apple-converted-space"> </span>Re: [cisco-voip] Error Processing SAML Response<span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""></o:p></span></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> <o:p class=""></o:p></span></div></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""> </o:p></span></div></div><div style="border: 1pt solid rgb(156, 101, 0); padding: 2pt;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 12pt; background-color: rgb(255, 235, 156);" class=""><span style="font-size: 10pt; color: rgb(156, 101, 0);" class="">[EXTERNAL]</span><span style="font-size: 10pt;" class=""><o:p class=""></o:p></span></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""> </o:p></span></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Have you been able to confirm the time difference?<o:p class=""></o:p></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I’m not trying to take their side of things, but if it’s minutes off, I wouldn’t doubt that’s possible. SSO is highly secure, right? A time difference might be enough to throw it off?<o:p class=""></o:p></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Here’s reference:<o:p class=""></o:p></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="https://support.pingidentity.com/s/article/Accounting-for-Time-Drift-Between-SAML-Endpoints50907" style="color: blue; text-decoration: underline;" class="">https://support.pingidentity.com/s/article/Accounting-for-Time-Drift-Between-SAML-Endpoints50907</a><o:p class=""></o:p></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="apple-converted-space"> </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip-bounces@puck.nether.net</a>><span class="apple-converted-space"> </span><b class="">On Behalf Of<span class="apple-converted-space"> </span></b>Jonathan Charles<br class=""><b class="">Sent:</b><span class="apple-converted-space"> </span>Thursday, September 16, 2021 6:23 PM<br class=""><b class="">To:</b><span class="apple-converted-space"> </span>Benjamin Turner <<a href="mailto:benmturner@hotmail.com" style="color: blue; text-decoration: underline;" class="">benmturner@hotmail.com</a>><br class=""><b class="">Cc:</b><span class="apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a><br class=""><b class="">Subject:</b><span class="apple-converted-space"> </span>Re: [cisco-voip] Error Processing SAML Response<o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="border: 1pt solid rgb(156, 101, 0); padding: 2pt;" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 12pt; background-color: rgb(255, 235, 156);" class=""><b class=""><span style="font-size: 10pt;" class="">CAUTION:</span></b><span class="apple-converted-space"><span style="font-size: 10pt;" class=""> </span></span><span style="font-size: 10pt;" class="">This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to<span class="apple-converted-space"> </span><a href="mailto:IThelp@uoguelph.ca" style="color: blue; text-decoration: underline;" class="">IThelp@uoguelph.ca</a></span><o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">No... TBH, I have never heard of it...<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">TAC is hyper-asserting that the issue is time mismatch between CUCM/CUC and ADFS... <o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Jonathan<o:p class=""></o:p></div></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On Thu, Sep 16, 2021 at 4:08 PM Benjamin Turner <<a href="mailto:benmturner@hotmail.com" style="color: blue; text-decoration: underline;" class="">benmturner@hotmail.com</a>> wrote:<o:p class=""></o:p></div></div></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin: 5pt 0in 5pt 4.8pt;" class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Have you tried to run a SAML Tracer?<span class="apple-converted-space"> </span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div id="x_gmail-m_6287419307271280829ms-outlook-mobile-signature" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Sincerely,<br class="">Benjamin M. Turner<o:p class=""></o:p></div></div></div><div class="MsoNormal" align="center" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center;"><hr size="2" width="98%" align="center" class=""></div><div id="x_gmail-m_6287419307271280829divRplyFwdMsg" class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="apple-converted-space"> </span>cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank" style="color: blue; text-decoration: underline;" class="">cisco-voip-bounces@puck.nether.net</a>> on behalf of Jonathan Charles <<a href="mailto:jonvoip@gmail.com" target="_blank" style="color: blue; text-decoration: underline;" class="">jonvoip@gmail.com</a>><br class=""><b class="">Sent:</b><span class="apple-converted-space"> </span>Thursday, September 16, 2021 4:56:48 PM<br class=""><b class="">To:</b><span class="apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" target="_blank" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a><span class="apple-converted-space"> </span><<a href="mailto:cisco-voip@puck.nether.net" target="_blank" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a>><br class=""><b class="">Subject:</b><span class="apple-converted-space"> </span>[cisco-voip] Error Processing SAML Response<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div></div><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">So, users are randomly getting the above error when logging into CUCM UCMUser or CUC Inbox... we are also getting it using AD credentials into admin pages for CUCM/CUC/etc.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">For a user, it will work find repeatedly, then you will get the error, close your browser, and reopen, still get the error for a few minutes. Then later it will work. When a user is affected, other users work fine.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">TAC is saying it is an NTP issue, however, NTP between CUCM 12.5 and IdP (ADFS 2.0) is fine.<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Pings are around 1ms between servers.<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Any ideas?<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Jonathan<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div></div></div></div></div></blockquote></div></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">_______________________________________________<br class="">cisco-voip mailing list<br class=""><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline;" class="">cisco-voip@puck.nether.net</a><br class=""><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color: blue; text-decoration: underline;" class="">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span></div></div></blockquote></div></div></div></blockquote></div><br class=""></div></body></html>