How to signing the request and send it to IdP

[Tejash Mistry]

Hello Peter,

Thanks for the reply.

I have tried <RelyingParty> node for sign request metadata. I have also
tried  <CredentialResolver> node but my problem is still there. 
I am giving you some more description about my problem

- We are SP and we communicate with IdP through Shibboleth.
- We have configured our SP successfully. We have more than 15 Federations
and 1000 IdPs.
- Most of the federation are working fine but only one federation ask us to
send sign request to them as their server is accepting only sign request.
- I have added <RelyingParty> node in the Shibboleth2.xml file and try to
send a sign request metadata, but it was not working.
- Then I have added <CredentialResolver> node also in Shibboleth2.xml file
and try to send sign request but it was also not working. 
- For temporary purposed that federation has turned off the node, which was
accepting only sign request and then I have tried to send the request and it
was working fine.
- So the problem is still there how to sign a request so that it will work
properly at that federation's end.
- That federation asked us for Base64 encoded sign request metadata.

Please help me to resolve this issue.

Thanks in advance.

Thanks & Regards,
Tejash Mistry


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Peter Schober
Sent: Wednesday, June 12, 2013 8:30 PM
To: users at shibboleth.net
Subject: Re: How to signing the request and send it to IdP

* Tejash Mistry <Tejash.Mistry at FastTrackTeam.com> [2013-06-12 16:44]:
> I am also able to access different IdPs through this configuration but 
> one IdP wants us to send sing request to their server. Could anyone 
> let me know how I can sign a request and send it to particular IdP please?

You'll need to make yourself familiar with the existing documentation.

Start here: https://wiki.shibboleth.net/confluence/display/SHIB2/Home

Configure https://wiki.shibboleth.net/confluence/display/SHIB2/Configuration
SP: Talk to a New Identity Provider
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAddIdP

Ibid.: Different cryptography: Add a <RelyingParty> element to the
<Application> configuration
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication#Nat
iveSPApplication-RelyingPartyAttributes
signing ("true", "false", "front", or "back") (defaults to "false")
  Controls outbound signing of XML messages. If "true", all are
  signed. If "front", only front-channel messages are signed. If "back",
  only back-channel messages are signed.

-peter
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net