NAM 3.1 x509 Mutual SSL Authentication

[jsa134]

That error is due to a name resolution problem between the IDP and Access Gateway, they must be able to resolve and access each others metadata URL in order for authentication to work.

Ok, worked through "Troubleshooting 100101043 and 100101044 Errors in Access Manager" at Cool Solutions: Troubleshooting 100101043 and 100101044 Errors in Access Manager and now I am presented https://<hostname.localdomain>/nidp/ and the x509 option, then:

Error 117 (net::ERR_BAD_SSL_CLIENT_AUTH_CERT): Unknown error.

The x509_Class had property attribute mapping "Subject Name" originally as "sasAllowableSubjectNames" (auto-populated). Should this be changed to the same subject name as the x509 cert I created? I'm trying that.