NextCloud AAI : SAML : Didmos Production

[darnold-zalf]

Most of the work done already in #107
Might need to change a couple of values around.

[darnold-zalf]

I think this because the IdP cert needs to be in a specific format - have asked Ali for details.

[darnold-zalf]

{"reqId":"EmKiwl9zfriEA045KSGa","level":3,"time":"2025-01-30T08:53:01+00:00","remoteAddr":"172.16.75.54","user":"--","app":"user_saml","method":"POST","url":"/apps/user_saml/saml/acs","message":"invalid_response","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0","version":"28.0.2.5","data":{"app":"user_saml"}}
{"reqId":"EmKiwl9zfriEA045KSGa","level":3,"time":"2025-01-30T08:53:01+00:00","remoteAddr":"172.16.75.54","user":"--","app":"user_saml","method":"POST","url":"/apps/user_saml/saml/acs","message":"Signature validation failed. SAML Response rejected","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0","version":"28.0.2.5","data":{"app":"user_saml"}}

[darnold-zalf]

PEBCAK error, sigh.
Re-loaded the correct IdP certificate in the correct place and both Carmen and I confirm we can login to NC using the 'Didmos Production' button.