Integration with GSA (Google Search Appliance)

[Sharma, Dattathreya]

Anyone integrated GSA with Shib SSO?

GSA advertises SAML (SAML2) as an authentication/SSO option, but is not working as expected. IdP side looks fine, but GSA fails to process the Authn response. Google support asked if IdP can include the signature outside the assertion.

I looked at the raw xml response from the IdP.  Signature  ( <ds:Signature> element)  is nested inside <saml2:Assertion>. Is it possible to have Signature outside the Assertion?

Thanks,
Datta


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120229/bbc6de1a/attachment.html