Failure to validate Response Signature

[Cantor, Scott]

On 10/5/12 5:59 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
>>Adding a <PolicyRule type="Ignore">saml2:OneTimeUse</PolicyRule> under
>>Conditions did not change anything. I even checked that the IDP issued
>>unique IDs for each response and assertion. Is there some documentation
>>to read more about the OneTimeUse?
>
>It's not a part of the SSO profile. Using the Ignore syntax should work.

I assume the sample you posted in the bug includes that condition also, so
I can verify that issue at the same time to see if there's a bug around
it. Oddly though, when I created the Ignore rule, I tested it specifically
with that condition type, so I imagine it's a syntax thing.

-- Scott