Integration with GSA (Google Search Appliance)

[Brent Putman]

On 2/29/12 12:16 AM, Sharma, Dattathreya wrote:
>
>
> I looked at the raw xml response from the IdP.  Signature
>  ( <ds:Signature> element)  is nested inside <saml2:Assertion>. Is it
> possible to have Signature outside the Assertion?  


Yes, see:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPXMLSigEnc


Change signResponses to "always" or "conditional" and signAssertions to
"never", for the relevant ProfileConfiguration within the relevant
RelyingParty.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120229/1d28d0d3/attachment.html