Simulating Invalid Request From RP

[Zmuda, Matthew R]

I have modified the default RP to sign requests already.
Ok I'll look into modifying the signature prior to posting to IDP.
This would be done before its Base64 encoded correct?

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, December 01, 2011 9:54 AM
To: users at shibboleth.net
Subject: Re: Simulating Invalid Request From RP

On 12/1/11 9:48 AM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:

>
>What do I do / Where do I corrupt the signature?
>This a code change needed or metadata change?

The SP doesn't sign requests by default. Aside from turning that on, you'd
have to prevent the URL from being submitted to the IdP, and tamper with
the signature parameter before doing it yourself.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.