Receiving errors on moving from development to staging environments

SAML for ASP.NET
1

Hi

We have implemented SAMLv2 with success on our development environment with little issue. We are using the saml.config file.

On moving to the staging environment we have encountered issues.

On starting the website and implementing the SSO we get an Access Denied message.
“System.Security.Cryptography.CryptographicException: Access denied.”

We have given the certificate folder and certificates access and on subsequent requests we do not get this message but:
“A valid SAML configuration hasn’t been specified.”

So every restart of the website we receive the Access Denied and all subsequent requests throw the SAML configuration error.

Are we missing something from the set up of the stage environment over the development?

Pete

2

Hi Pete
It sounds like a permissions error loading an X.509 certificate.
Please take a look at the following article. Note that you need to get the permissions right for the private key as well.
http://www.componentspace.com/Forums/29/Troubleshooting-Loading-X.509-Certificates
The other option to consider is to store certificate in the Windows certificate store rather than on the file system.
This may be easier as far as setting the permissions etc.
http://www.componentspace.com/Forums/44/X.509-Certificate-Management

3

Hi

The issue on the stage server was with access for the IIS_IUSRS on the Machine Keys directory as per your artical
http://www.componentspace.com/Forums/29/Troubleshooting-Loading-X.509-Certificates

I gave access and it is all working.

Thank You

Pete

4

You’re welcome.