How to Ignore a Signature

[Henry B. Hotz]

Yes, it was the samlsec:SAML2HTTPRedirectSimpleSign rule (but Nate got me close enough).  Now I have some attribute mapping issues, but that's a new subject.

I don't suppose there is any way to disable that rule for only one SP?

Yes, they have some work to do.  They want to claim SAML2, but they don't seem to understand a lot beyond ADFS.  This is only a demo, so not sure how much we care in the long run.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu