configuring metadata for Net+ Box SP

Rob Gorrell rwgorrel at uncg.edu
Mon Jul 8 15:09:09 EDT 2013


> Here is the start of the encrypted assertion that worked from our 2.3.8
> IDP to box.
> Some things that might be an issue from your IDP: sha1, aes-128 and
> rsa-oaep-mgf1p
>

Mine looks pretty much identical (we are also 2.3.8 IdP) with aes-128 being
the encryption method of the encrypted assertion. mine includes a signature
prior to that which you may just be leaving off from your cut/paste, but
otherwise is pretty identical.

I've got a few emails out to Box right now and am waiting their response
about turning on support for an encrypted assertion from them. I did send
them a sample assertion from this very same IdP against a different SP as
part of filling out my federation questionnaire, but the question of
encryption of the assertions never came up. We'll see what they say.

Thanks again for your help.

-Rob

-- 
Robert W. Gorrell
Middleware Engineer, Identity and Access Management
University of NC at Greensboro
336-334-5954
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130708/c0c693fc/attachment.html 


More information about the users mailing list