I have SAML configured on my server with ADFS and IWA. It is working great with Domino web apps so I know it is configured correctly.
I have x-cert documents for the ssl certs on both the adfs server and the Domino server.
When I launch the Notes client for the first time it prompts for PW (as it should). Then it prompts me that it is going to download the ID for federated logon. After that it hangs. On subsequent startups the splash screen comes up and it says it has connected to the server and then the status bar keeps going up and then starting over. I have the debug from the client here (see below for the server console with debug enabled too):
Client Debug:
Here is additional debug from the client:
[051C:0002-0B40] 12/31/2013 11:58:58.73 AM NotesNFLListener> Message queue locked for SAML authentication
[051C:0002-0B40] 12/31/2013 11:58:59.26 AM NotesNFLListener> ignoring request9
[051C:0002-0B40] 12/31/2013 11:58:59.26 AM NotesNFLListener> ignoring request9
[051C:0002-0B40] 12/31/2013 11:58:59.26 AM NotesNFLListener> ignoring request9
[051C:0002-0B40] 12/31/2013 11:58:59.75 AM NotesNFLListener> processing NFL request A0
[051C:0004-0A3C] 12/31/2013 11:59:01.84 AM NotesNFLListener> processing NFL request A0
debugout_TECHNOTICSEP1_2013_12_31@11_37_26.txt
[0648:0002-09EC] 12/31/2013 11:37:26.35 AM NEMInit> Calling NEMCheckPreviousInstance
[0648:0002-09EC] 12/31/2013 11:37:26.37 AM NEMInit> Setting Current Core Process Id to shared memory BLK_WCT_PID [1608]
[0648:0002-09EC] 12/31/2013 11:37:26.43 AM DeskDeleteNFLID> SEC_mpfct_MMFilenameIsInMem failure : 0x0
[0648:0002-09EC] 12/31/2013 11:37:26.43 AM WM_DESK_INIT> Calling NEMCheckPreviousInstance
[0648:0002-09EC] 12/31/2013 11:37:26.63 AM DeskSendStatusBarUpdateToWCT> ENTER
[0648:0002-09EC] 12/31/2013 11:37:26.66 AM DeskSendStatusBarUpdateToWCT> ENTER
[0648:0002-09EC] 12/31/2013 11:37:26.66 AM DeskSendStatusBarUpdateToWCT> ENTER
[0648:0002-09EC] 12/31/2013 11:37:26.84 AM deskinit::DeskProcessDeployNsf> No need to process deploy.nsf because provisioning.manifest.version has not changed since the last startup.
[0648:0002-09EC] 12/31/2013 11:37:26.84 AM DeskClientOpenInt> Calling CreateProgramRCP pszRCPCmdLine[/authenticate "=C:\Program Files (x86)\IBM\Notes\notes.ini" -RPARAMS -vmargs -Dnotes.federatedlogin=true ] bDeskProvisioningRestart [0]
[0648:0002-09EC] 12/31/2013 11:37:26.84 AM DeskClientOpenInt> DESK_CHECKNOTES2ALIVE_TIMER started
[0648:0002-09EC] 12/31/2013 11:37:26.84 AM DeskClientOpenInt> Executed CreateProgramRCP
[0380:0002-08F0] 12/31/2013 11:37:29.84 AM NotesNFLListener> Message queue locked for SAML authentication
[0648:0002-09EC] 12/31/2013 11:37:29.87 AM FOCUS>
[0648:0002-09EC] File: activate.cpp
[0648:0002-09EC] Line: 373
[0648:0002-09EC] Function: CSubprogram::DeactivateSubWindow
[0648:0002-09EC] In Deactivate: this: Dec: 131592 Hex: 20208
[0648:0002-09EC] Title: Workspace
[0648:0002-09EC] Window Class: NtDsWnd
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 0
[0648:0002-09EC] Parent Window: Dec: 131582 Hex 201FE
[0648:0002-09EC] Title:
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 0
[0648:0002-09EC] Top Level Window: Dec: 394974 Hex 606DE
[0648:0002-09EC] Title: Workspace - IBM Notes
[0648:0002-09EC] Window Class: NOTES
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 1
[0648:0002-09EC] Foreground Focus Window: Dec: 263662 Hex: 405EE
[0648:0002-09EC] Title: Rob Axelrod/technoticsdemo: IBM.LOTUS.CLIENT.NOTES, Release 9.0.1
[0648:0002-09EC] Window Class: ConsoleWindowClass
[0648:0002-09EC] Enabled: 1, Visible: 1, Active: 0
[0648:0002-09EC] Parent Window: Dec: 0 Hex 0
[0648:0002-09EC] Title:
[0648:0002-09EC] Enabled: 0, Visible: 0, Active: 0
[0648:0002-09EC] Top Level Window: Dec: 263662 Hex 405EE
[0648:0002-09EC] Title: Rob Axelrod/technoticsdemo: IBM.LOTUS.CLIENT.NOTES, Release 9.0.1
[0648:0002-09EC] Window Class: ConsoleWindowClass
[0648:0002-09EC] Enabled: 1, Visible: 1, Active: 0
[0648:0002-09EC] INVALID Scratchpad Window : Dec: 0 Hex: 0
[0648:0002-09EC] *** FOCUS LOGS END ****
[0648:0002-09EC] 12/31/2013 11:37:29.87 AM FOCUS>
[0648:0002-09EC] File: activate.cpp
[0648:0002-09EC] Line: 414
[0648:0002-09EC] Function: CSubprogram::DeactivateSubWindow
[0648:0002-09EC] In Deactivate: this: Dec: 131592 Hex: 20208
[0648:0002-09EC] Title: Workspace
[0648:0002-09EC] Window Class: NtDsWnd
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 0
[0648:0002-09EC] Parent Window: Dec: 131582 Hex 201FE
[0648:0002-09EC] Title:
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 0
[0648:0002-09EC] Top Level Window: Dec: 394974 Hex 606DE
[0648:0002-09EC] Title: Workspace - IBM Notes
[0648:0002-09EC] Window Class: NOTES
[0648:0002-09EC] Enabled: 1, Visible: 0, Active: 1
[0648:0002-09EC] Foreground Focus Window: Dec: 263662 Hex: 405EE
[0648:0002-09EC] Title: Rob Axelrod/technoticsdemo: IBM.LOTUS.CLIENT.NOTES, Release 9.0.1
[0648:0002-09EC] Window Class: ConsoleWindowClass
[0648:0002-09EC] Enabled: 1, Visible: 1, Active: 0
[0648:0002-09EC] Parent Window: Dec: 0 Hex 0
[0648:0002-09EC] Title:
[0648:0002-09EC] Enabled: 0, Visible: 0, Active: 0
[0648:0002-09EC] Top Level Window: Dec: 263662 Hex 405EE
[0648:0002-09EC] Title: Rob Axelrod/technoticsdemo: IBM.LOTUS.CLIENT.NOTES, Release 9.0.1
[0648:0002-09EC] Window Class: ConsoleWindowClass
[0648:0002-09EC] Enabled: 1, Visible: 1, Active: 0
[0648:0002-09EC] INVALID Scratchpad Window : Dec: 0 Hex: 0
[0648:0002-09EC] *** FOCUS LOGS END ****
[0380:0002-08F0] 12/31/2013 11:37:30.35 AM NotesNFLListener> ignoring request 9
[0380:0002-08F0] 12/31/2013 11:37:30.35 AM NotesNFLListener> ignoring request 9
[0380:0002-08F0] 12/31/2013 11:37:30.35 AM NotesNFLListener> ignoring request 9
[0648:0002-09EC] 12/31/2013 11:37:30.38 AM AddTrustedSites> No Trusted Sites passed in
[0648:0002-09EC] 12/31/2013 11:37:30.38 AM AddTrustedSites> Exit with status code:0x0
[0648:0002-09EC] 12/31/2013 11:37:30.38 AM DeskPostNFLDataToJava> ENTER
[0648:0002-09EC] 12/31/2013 11:37:30.38 AM DeskPostNFLDataToJava> xml response : [<response><NFLResponse IDPurl='https://adfs18.technoticsdemo.com/adfs/ls/IdpInitiatedSignOn.aspx?loginToRp=https://technoticsdom1.technoticsdemo.com'
[0648:0002-09EC] IDPUserName='CN=Rob Axelrod/O=technoti
[0380:0002-08F0] 12/31/2013 11:37:30.38 AM NotesNFLListener> processing NFL request A0
[0648:0002-09EC] 12/31/2013 11:37:30.45 AM DeskPostNFLDataToJava> EXIT
[0648:0002-09EC] 12/31/2013 11:37:32.35 AM DeskPostNFLDataToJava> ENTER
[0648:0002-09EC] 12/31/2013 11:37:32.35 AM DeskPostNFLDataToJava> xml response : [<response><NFLResponse SSLCertTrusted='true'/></response>
[0380:0004-0914] 12/31/2013 11:37:32.35 AM NotesNFLListener> processing NFL request A0
[0648:0002-09EC] 12/31/2013 11:37:32.35 AM DeskPostNFLDataToJava> EXIT
Server console:
[0E38:0002-06BC] 12/31/2013 11:58:19 AM Recovery Manager: Restart Recovery complete. (0/0 databases needed full/partial recovery)
[0A90:0002-0F18] 12/31/2013 11:58:21 AM Event Monitor started
[0A90:0002-0F18] 12/31/2013 11:58:21 AM Warning: All Domino Domain Monitoring probes are disabled resulting in the loss of valuable diagnostic information. Please configure DDM probes in events4.nsf. Assess DDM reports in ddm.nsf.
[0E38:0002-06BC] refreshing view $Users - 12/31/2013 11:58:21 AM
[0E38:0002-06BC] finished refresh - 12/31/2013 11:58:21 AM
[0E38:0002-06BC] 12/31/2013 11:58:22 AM Server started on physical node TECHNOTICSDOM1
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM NOTES.INI contains the following *DEBUG* parameters:
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM DEBUG_SAML=31
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM Warning: Debug parameters could impact operation or performance.
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM Contact your appropriate support vendor.
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM The Console file is C:\IBM\Domino\data\IBM_TECHNICAL_SUPPORT\console.log
[0E38:0008-0C4C] 12/31/2013 11:58:22 AM Console Logging is ENABLED
[0C1C:0002-0D24] 12/31/2013 11:58:22 AM Index update process started:
[0A38:0002-0C04] 12/31/2013 11:58:22 AM Database Replicator started
[0A38:0002-0C04] 12/31/2013 11:58:22 AM Replicator is set to Ignore Database Quotas
[0FA4:0002-0B1C] 12/31/2013 11:58:23 AM Admin Process: TECHNOTICSDOM1/technoticsdemo is the Administration Server of the Domino Directory.
[0F5C:0002-034C] 12/31/2013 11:58:23 AM Statistic Collector started
[0E08:0002-07E4] 12/31/2013 11:58:23 AM DAOSMGR: DAOS is not enabled, nothing to do.
[0E38:0008-0C4C] 12/31/2013 11:58:23 AM Database Server started
[0FA4:0002-0B1C] 12/31/2013 11:58:23 AM Administration Process started
[0FE0:0002-0EE0] 12/31/2013 11:58:23 AM Agent Manager started
[0BE8:0002-0A68] 12/31/2013 11:58:23 AM DIIOP Server: Starting...
[05FC:0002-074C] 12/31/2013 11:58:23 AM AMgr: Executive '1' started. Process id '1532'
[08E0:0002-0E30] 12/31/2013 11:58:23 AM Informational, rebuilding view - user specified REBUILD (reading C:\IBM\Domino\data\names.nsf view note Title:'($Servers)')
[0BF0:0002-0F98] 12/31/2013 11:58:24 AM Router: Mail Router started for domain TECHNOTICSDEMO
[0BF0:0002-0F98] 12/31/2013 11:58:24 AM Router: Internet SMTP host TECHNOTICSDOM1 in domain technoticsdemo.com
[0D9C:0002-0D68] 12/31/2013 11:58:24 AM CA Process: Certifier O=technoticsdemo initialized.
[0F88:0002-08E8] 12/31/2013 11:58:24 AM LDAP Server: Starting...
[0F88:0007-08E8] 12/31/2013 11:58:25 AM LDAP Server: Serving directory names.nsf in the technoticsdemo.com Internet domain
[0F88:0007-08E8] 12/31/2013 11:58:25 AM LDAP Server: Serving referrals to LDAP server TECHNOTICSDEMO.COM
[0F88:0007-08E8] 12/31/2013 11:58:25 AM LDAP Schema: Started loading...
[0BE8:0002-0A68] 12/31/2013 11:58:25 AM DIIOP Server: Started
[08E0:0002-0E30] 12/31/2013 11:58:25 AM HTTP Server: Using Web Configuration View
[0F88:0007-08E8] 12/31/2013 11:58:25 AM LDAP Schema: Finished loading
[0F88:0002-08E8] 12/31/2013 11:58:26 AM LDAP Server: Started
[08E0:0002-0E30] 12/31/2013 11:58:30 AM JVM: Java Virtual Machine initialized.
[08E0:0002-0E30] 12/31/2013 11:58:30 AM HTTP Server: Java Virtual Machine loaded
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM CSRF Init: iNotes_WA_Security_ReturnUrlCheck> c_CSRFReturnUrlCheck: 1
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM SECIdPCatGetIdPInfo> Searching for hostname="TECHNOTICSDOM1.technoticsdemo.com"
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> Searching cache ContextId=1 hostname=TECHNOTICSDOM1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> Not Found in cache ContextId=1 hostname=TECHNOTICSDOM1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> ConfigCacheFind: cache miss
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> Searching cache ContextId=1 hostname=TECHNOTICSDOM1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> Not Found in cache ContextId=1 hostname=TECHNOTICSDOM1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheFind> ConfigCacheFind: cache miss
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM SECIdPCatGetIdPInfo> Looking for the config note on hostname=TECHNOTICSDOM1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM LockContext> ctxId=1
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM FindConfigNote> Searching IdPCat for hostname="TECHNOTICSDOM1.technoticsdemo.com"
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM RefreshContextDbhandle> Opening IdPCat for globalContext
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM RefreshContextDbhandle> Reopening IdPCat for contextId=1
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM UnlockContext> CtxId=1
[08E0:0002-0E30] 12/31/2013 11:58:30.19 AM ConfigCacheAdd> Adding config to cache: ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[08E0:0002-0E30] 12/31/2013 11:58:30 AM HTTP Server: Warning - SAML and Windows Single Sign-on cannot be enabled together. Ignoring Windows Single Sign-on.
[08E0:0002-0E30] iNotes Init: Credential Store Configuration not enabled, less secure mode.
[08E0:0002-0E30] 12/31/2013 11:58:36 AM XSP Command Manager initialized
[08E0:0002-0E30] 12/31/2013 11:58:37 AM HTTP Server: Started
12/31/2013 11:58:56.10 AM SECIdPCatGetIdPInfo> Searching for hostname="technoticsdom1.technoticsdemo.com"
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> Searching cache ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> Not Found in cache ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> ConfigCacheFind: cache miss
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> Searching cache ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> Not Found in cache ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheFind> ConfigCacheFind: cache miss
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM SECIdPCatGetIdPInfo> Looking for the config note on hostname=technoticsdom1.technoticsdemo.com
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM LockContext> ctxId=1
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM FindConfigNote> Searching IdPCat for hostname="technoticsdom1.technoticsdemo.com"
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM UnlockContext> CtxId=1
[0E38:003F-09B4] 12/31/2013 11:58:56.10 AM ConfigCacheAdd> Adding config to cache: ContextId=1 hostname=technoticsdom1.technoticsdemo.com
[0E38:0031-0C88] 12/31/2013 12:03:28.05 PM LockContext> ctxId=1
[0E38:0031-0C88] 12/31/2013 12:03:28.05 PM UnlockContext> CtxId=1