Simulating Invalid Request From RP

[Chad La Joie]

If you're really going to test you probably should go look at the
specs first.  Otherwise you're just making assumptions about what to
test, what should(n't) fail when, etc.

On Thu, Dec 1, 2011 at 10:00, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 12/1/11 9:57 AM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:
>>
>>I have modified the default RP to sign requests already.
>>Ok I'll look into modifying the signature prior to posting to IDP.
>>This would be done before its Base64 encoded correct?
>
> Only if you're using POST. That wouldn't be typical.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered