Hi,

I use the version 9.3 of nuxeo (no problem with the 9.2 version). When I try to connect the first time to nuxeo with shibboleth, I have this error :

2018-01-04 19:46:52,468 ERROR [ajp-nio-0.0.0.0-8009-exec-1] [org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin] Failed to get or create user entry
org.nuxeo.ecm.directory.DirectorySecurityException: User null does not have Write permission
    at org.nuxeo.ecm.directory.BaseSession.checkPermission(BaseSession.java:143)
    at org.nuxeo.ecm.directory.BaseSession.createEntry(BaseSession.java:357)
    at org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin.handleRetrieveIdentity(ShibbolethAuthenticationPlugin.java:133)
(...)

I modified this file : nuxeo-platform-login-shibboleth/src/main/java/org/nuxeo/ecm/platform/shibboleth/auth/ShibbolethAuthenticationPlugin.java

131c131
<                 DocumentModel entry = userDir.getEntry(userId);
---
>                 DocumentModel entry = Framework.doPrivileged(() -> userDir.getEntry(userId));
133c133
<                     userDir.createEntry(fieldMap);
---
>                     Framework.doPrivileged(() -> userDir.createEntry(fieldMap));
136c136
<                     userDir.updateEntry(entry);
---
>                     Framework.doPrivileged(() -> userDir.updateEntry(entry));

And now it's ok, my new profil is created. Happy new year :)