configuring metadata for Net+ Box SP

[Cantor, Scott]

> I thought Doug stated earlier... "That says its OK for the IDP to use the
> certificate for encrypted assertions
> in addition to box signing requests. The accept the encrypted assertions"

In that event, the metadata needs to contain a key. I just checked mine, and the copy I have from Box does contain one.

> But if I need to disable this because Box is an SP that doesn't support
> encryption, can you explain a little more about how to do this per RP? Is
> there something I can add to the <MetadataProvider> tag?

No.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPXMLSigEnc

-- Scott