How to Ignore a Signature

[Brent Putman]

On 8/4/12 5:12 PM, Henry B. Hotz wrote:
>
> I don't suppose there is any way to disable that rule for only one SP?

Yes, although I don't think we have it documented well on the wiki. 
Create a custom RelyingParty definition for that SP, documented here:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPRelyingParty

Probably want to start by just copying the ProfileConfigurations
verbatim from the DefaultRelyingParty.

Copy the <SecurityPolicy> for SAML 2 SSO, changing what you want, and
giving it a new id.

Then add a securityPolicyRef attribute on the profile config to link the
new SecurityPolicy to the custom RP's profile configuration:

<ProfileConfiguration xsi:type="saml:SAML2SSOProfile"  
securityPolicyRef="your-new-policy-id"  ...other attributes... />



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120804/f372bad6/attachment.html