SP Signed SAML requests

[Mike Flynn]

OK, rule added and issue resolved (for two different PingFederate IDps).  For what it's worth, anyone connecting to Ping Identity's Ping Federate IDp will have to have request signing turned on to work with that system.  According to my customer, they cannot turn that off on their side.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Monday, February 18, 2013 1:12 PM
Subject: RE: SP Signed SAML requests
 
> Having turned off signing, I have a customer now that reports this error:
> 
> 
> Error from identity provider:
>     Status: urn:oasis:names:tc:SAML:2.0:status:Requester
>     Message: Signature required
> 
> Will I need to set a rule like this for them?

Yeah, more or less.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130218/da4a0b25/attachment.html