Issue with Notes Client SAML

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject: Issue with Notes Client SAML

Feedback Type: Problem

Product Area: Notes Client

Technical Area: Security

Platform: Windows

Release: 8.5.3

Reproducible: Always

Note I'm running 9.0.1 all around and ADFS 2.0 on Windows 2012. I have SAML set up in my environment and it is working great for web access. It is almost working in Notes but it fails after downloading the ID to the workstation. I turned on a ton of debug and this is what I'm getting. Any insights out there?

[0EB8:0002-0964] 12/30/2013 05:56:23.33 PM DeskClientOpenInt> Calling CreateProgramRCP pszRCPCmdLine[/authenticate "=C:\Program Files (x86)\IBM\Notes\notes.ini" -RPARAMS -vmargs -Dnotes.federatedlogin=true -Dnotes.federatedloginlaunch=true ] bDeskProvisioningRestart [
[0EB8:0002-0964] 12/30/2013 05:56:23.33 PM DeskClientOpenInt> DESK_CHECKNOTES2ALIVE_TIMER started
[0EB8:0002-0964] 12/30/2013 05:56:23.33 PM DeskClientOpenInt> Executed CreateProgramRCP
[0DFC:0002-09E0] 12/30/2013 05:56:23.38 PM NotesNFLListener> Message queue locked for SAML authentication
[0DFC:0004-0D94] 12/30/2013 05:56:23.85 PM NNOTESWC::NotesListener> waiting for NFL login to complete
[0EB8:0002-0964] 12/30/2013 05:56:24.33 PM AddTrustedSites> Exit with status code:0x0
[0EB8:0002-0964] 12/30/2013 05:56:24.33 PM DeskPostNFLDataToJava> ENTER
[0EB8:0002-0964] 12/30/2013 05:56:24.33 PM DeskPostNFLDataToJava> xml response : [0EB8:0002-0964] 12/30/2013 05:56:24.83 PM DeskPostNFLDataToJava> EXIT [0DFC:0007-0F88] 12/30/2013 05:56:24.83 PM NotesNFLListener> processing NFL request A0 [0DFC:0000-0308] 12/30/2013 05:56:24.85 PM NotesFederatedLoginSwitchLocation> new location: Online [0DFC:0004-0D94] 12/30/2013 05:56:24.86 PM NNOTESWC::NotesListener> waiting for NFL login to complete [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM DeskCheckWksMQForNFLEvents> new location:Online [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM DeskCheckWksMQForNFLEvents> new LMBCS location:Online [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM NFLSwitchLocation> location not changed [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM DeskPostNFLDataToJava> ENTER [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM DeskPostNFLDataToJava> xml response : [ [0EB8:0002-0964] 12/30/2013 05:56:25.33 PM DeskPostNFLDataToJava> EXIT [0DFC:0008-0308] 12/30/2013 05:56:25.33 PM NotesNFLListener> processing NFL request A0 [0DFC:0004-0D94] 12/30/2013 05:56:25.36 PM NNOTESWC::NotesListener> waiting for NFL login to complete [0EB8:0002-0964] 12/30/2013 05:56:25.83 PM DeskCheckWksMQForNFLEvents> error while getting SAML : 0x9912 [0EB8:0002-0964] 12/30/2013 05:56:25.83 PM DeskGetSamlAuthInfo> error DeskCheckWksMQForNFLEvents : 0x9912 [0EB8:0002-0964] 12/30/2013 05:56:25.83 PM PH3_SAML_Interceptor> Failed to retrieve SAML assertion from IdP [0EB8:0002-0964] 12/30/2013 05:56:25.84 PM DeskPostNFLDataToJava> ENTER [0EB8:0002-0964] 12/30/2013 05:56:25.84 PM DeskPostNFLDataToJava> xml response : [ [0EB8:0002-0964] 12/30/2013 05:56:25.84 PM DeskPostNFLDataToJava> EXIT [0EB8:0002-0964] 12/30/2013 05:56:25.84 PM DESKSECEnableNFL> DeskSwitchToUser failure : 0x9912 [0EB8:0002-0964] Report ID Locked (CDB2): Pid = EB8 Tid = 2: FileModLock UnLock 2 [0EB8:0002-0964] Report ID Locked (CDB2): No error [0EB8:0002-0964] Report ID Locked (CDB2): KFC Lock count: 0 KFC Pid=00000EB8 KFC Tid=00000002: [0EB8:0002-0964] Report ID Locked (CDB2): Mod Pid=00000EB8 Mod Tid=00000002 Mod Lock Count=0 [0EB8:0002-0964] 69A626EA [load addr 0x079f0000] nnotes! ReportIDFileLocked@12 +0x19a [0EB8:0002-0964] 699FF207 [load addr 0x079f0000] nnotes! FileModifierLock@8 +0x147 [0EB8:0002-0964] 69A64F34 [load addr 0x079f0000] nnotes! ExtendedAccess2@16 +0x64 [0EB8:0002-0964] 695B2BD0 [load addr 0x079f0000] nnotes! iKFMAccess@16 +0x200 [0EB8:0002-0964] 695A4B20 [load addr 0x079f0000] nnotes! SECKFMAccess@16 +0x210 [0EB8:0002-0964] 6BD87831 [load addr 0x0c360000] nnotesws! DESKSECEnableNFL@8 +0x2a1 [0EB8:0002-0964] 6BD8807C [load addr 0x0c360000] nnotesws! ?EnableNFL@@YGGPAUKFM_PASSWORD@@PAUWKSMSG_ADDCHGPWDPARAMS@@@Z +0x18c [0EB8:0002-0964] 6BD8C0F1 [load addr 0x0c360000] nnotesws! DESKKFMCallMainDialog@16 +0xa41 [0EB8:0002-0964] 6BD8CC24 [load addr 0x0c360000] nnotesws! DESKCheckAndEnforceNFLPolicy@4 +0x2e4 [0EB8:0002-0964] 6BC998D3 [load addr 0x0c360000] nnotesws! ProcessWksMsgExt@32 +0x3983 [0EB8:0002-0964] 6B6E6006 [load addr 0x0c360000] nnotesws! CheckWksMQ@4 +0x1e6 [0EB8:0002-0964] 6B6D74FB [load addr 0x0c360000] nnotesws! ?SubMessageProc@CDeskSubprogram@@UAGHIIJPAJ@Z +0x1e6b [0EB8:0002-0964] 6B6D513D [load addr 0x0c360000] nnotesws! MainWndProc@16 +0x21ed [0EB8:0002-0964] 752662FA [load addr 0x070f0000] USER32! gapfnScSendMessage +0x332 [0EB8:0002-0964] 75266D3A [load addr 0x070f0000] USER32! GetThreadDesktop +0xd7 [0EB8:0002-0964] 752677C4 [load addr 0x070f0000] USER32! CharPrevW +0x138 [0EB8:0002-0964] 7526788A [load addr 0x070f0000] USER32! DispatchMessageW +0xf [0EB8:0002-0964] 6B770574 [load addr 0x0c360000] nnotesws! NEMMainLoop@4 +0x4a4 [0EB8:0002-0964] 00F21F90 [load addr 0x09410000] NLNOTES! WinMain@16 +0xbe0 [0EB8:0002-0964] 00F22FA4 [load addr 0x09410000] NLNOTES! __tmainCRTStartup +0x150 [0EB8:0002-0964] 7560336A [load addr 0x096c0000] kernel32! BaseThreadInitThunk +0x12 [0EB8:0002-0964] 776B9F72 [load addr 0x097d0000] ntdll! RtlInitializeExceptionChain +0x63 [0EB8:0002-0964] 776B9F45 [load addr 0x097d0000] ntdll! RtlInitializeExceptionChain +0x36 [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskSendAuthenticationMsgToWCT> ENTER [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskSendAuthenticationMsgToWCT> processing 2 [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskPostDataToMQ> ENTER [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskPostDataToMQ> EXIT [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskSendAuthenticationMsgToWCT> EXIT [0EB8:0002-0964] 12/30/2013 05:56:25.85 PM DeskSendStatusBarUpdateToWCT> ENTER [0EB8:0002-0964] Report ID Locked (CDB3): Pid = EB8 Tid = 2: FileModLock Lock 1 [0EB8:0002-0964] Report ID Locked (CDB3): No error [0EB8:0002-0964] Report ID Locked (CDB3): KFC Lock count: 0 KFC Pid=00000EB8 KFC Tid=00000002: