unencrypted assertions not working

[Rod Widdowson]

..... And the log says?

Sent from my iPad

On 3 Apr 2013, at 08:18, lalithj <j_lalith at hotmail.com> wrote:

> 
> Hi,
> 
> We got a new SP requirment that they need unencrypted assertions, am not
> sure whether this is the best practice or not(which is a seperate question)
> 
> At the moment we use default relying party with below profile
> 
>  <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
> includeAttributeStatement="true"
>                                 assertionLifetime="PT5M"
> assertionProxyCount="0"
>                                 signResponses="never"
> signAssertions="always"
>                                 encryptAssertions="conditional"
> encryptNameIds="never"/>
> 
> 
> Because of this, current integration is failing, when I change the above
> encryptAssertions to never, it (integration) works with the default replying
> party.
> 
> 
> Issue is, instead of changing the default relying party, I introduce a new
> relying party for the SP as shown below in relying-party.xml, where
> https://clientsptest.com is the entityId of the sp Meta data,
> but with this integration fails, what could be the reason, do I have to
> configure elswhere or am I missing anything
> 
> 
> 
> <rp:RelyingParty id="https://clientsptest.com"
>              provider="https://ouridp.com/idp/shibboleth"
> defaultSigningCredentialRef="IdPCredential">
> 
> 
>        <rp:ProfileConfiguration
> xsi:type="saml:SAML1ArtifactResolutionProfile" signResponses="conditional"
>                                 signAssertions="never"/>
> 
>        <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
> includeAttributeStatement="true"
>                                 assertionLifetime="PT5M"
> assertionProxyCount="0"
>                                 signResponses="never"
> signAssertions="never"
>                                 encryptAssertions="never"
> encryptNameIds="never"/>
> 
> ...
> ...
> 
> </rp:RelyingParty>
> 
> 
> 
> 
> 
> 
> 
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/unencrypted-assertions-not-working-tp7585820.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net