Is testshib.org sending a different certificate when returning an Assertion to my SP?

[Yaowen Tu]

Actually I meant that the Assertion is signed. It looks like
testshib.orgis using a different certificate to sign the assertion.

Thanks,
Yaowen

Yaowen


On Wed, Apr 17, 2013 at 5:08 PM, Yaowen Tu <yaowen.tu at gmail.com> wrote:

> But the response returned to my SP is signed. In the Assertion object, the
> isSigned() flag is true.
>
> Did I miss anything?
>
> Thanks,
> Yaowen
>
> Yaowen
>
>
> On Wed, Apr 17, 2013 at 4:48 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 4/17/13 7:35 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
>> >
>> >From the SAMLResponse of the testshib.org <http://testshib.org> IdP, it
>> >contains a different certificate in the <Response> tag.
>>
>> I just looked at a response from it. Since it's not signing the response,
>> there is no certificate in it. So I would guess that given nothing would
>> have changed, that you are probably mistaken about the issue.
>>
>> -- Scott
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130417/87b3fbc8/attachment.html