Problems setting up ADFS and Shibboleth

[Cantor, Scott]

On 12/21/11 5:09 PM, "Steven Barnhart" <SBarnhart at esue.ohio-state.edu>
wrote:

>Okay, thanks for pointing me in the right direction Scott. I got it
>working, but had to change signResponses to  "conditional". Does that
>make sense?

Well, if it changed from never to conditional, that would suggest ADFS
can't handle unsigned responses, which I don't think we've noted in the
past. And of course their error message would be wrong.

It's possible encryption is involved. Maybe if you encrypt the assertion,
the response has to be signed, but not otherwise.

Anything people can confirm would be useful to track here:
https://wiki.shibboleth.net/confluence/display/SHIB2/MicrosoftInterop

-- Scott