XMSigning SP configuration2.5

[thibault2638]

Hi everyone,

I'd like to sign my samlrequest, not by using assertions signature but
include signature inside samlrequest initiated by my Shibboleth's SP.

I did'nt find any element in the wiki configuration pages.


Here my shibboleth2.xml :

<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"    
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    clockSkew="180">

        <OutOfProcess logger="shibd.logger"/>

    <ApplicationDefaults id="default" policyId="default"
entityID="http://test.engagement.test.com/SAML2" REMOTE_USER="persistent-id"
homeURL="https://recette.auth-proxy.com/shibboleth/doProcess.php"
signing="false">

        
  <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
checkAddress="false" handlerSSL="false" cookieProps="http">

	    
	    <SessionInitiator type="Chaining" Location="/shibboleth"
isDefault="true" id="Intranet"
entityID="https://ssocob.staging.echonet/idp/SAML2">
			<SessionInitiator type="SAML2" acsIndex="1" isPassive="false"
forceAuthn="false"
authnContextClassRef="urn:staging:saml:auth-level:medium"/>
	    </SessionInitiator>

	    <md:AssertionConsumerService Location="/SAML2/POST" index="1"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
     
        <Handler type="MetadataGenerator" Location="/Metadata"
signing="true"/>

           
        <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>

        <Handler type="Session" Location="/Session"
showAttributeValues="true"/>

	</Sessions>

   
        <Errors supportContact="root at localhost"
            helpLocation="/about.html"
            styleSheet="/shibboleth-sp/main.css"/>
        
       
	 <TrustEngine type="Chaining">
            <TrustEngine type="ExplicitKey"/>
            <TrustEngine type="PKIX"/>
        </TrustEngine>


	<MetadataProvider type="XML" path="/etc/shibboleth/metadata/idp.xml"/>
	
	<RelyingParty Name="https://idp.org/idp/SAML2" signing="false"
keyName="bnpp"/>
	

    <AttributeExtractor type="XML" validate="true" reloadChanges="false"
path="attribute-map.xml"/>
    
    <AttributeResolver type="Query" subjectMatch="true"/>

    <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>

	
	<CredentialResolver type="File" key="/etc/shibboleth/sp.p12"
password="******" certificate="/etc/shibboleth/sp.cert"/>
    
    </ApplicationDefaults>
    
    
    <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>

    
    <ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>

</SPConfig>

Thank's in advance for your futur answer.

Thibault



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/XMSigning-SP-configuration2-5-tp7590575.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.