unsigned authN requests

[Cantor, Scott]

On 6/5/13 8:31 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>It sounds like this isn't the problem, but just wanted to comment that:
>Actually, you can get an unsigned SAML 2 AuthnRequest that fails the
>IdP's security policy (just b/c it's unsigned) if the SP's metadata says
>that it will sign requests.  That's what this security rule does:
>
><security:Rule xsi:type="samlsec:SAML2AuthnRequestsSigned"/>
>
>I doubt anyone uses that much, but that's what it does, enforce the
>SPSSODescriptor/@AuthnRequestsSigned metadata attribute semantics.

Ah, right. I don't think that fits the log, but worth checking.

-- Scott