XMSigning SP configuration2.5
Thibault Jurado-Leduc
thibault.juradoleduc at businessdecision.com
Tue Oct 15 16:36:35 EDT 2013
Thank's for your answer Scott, but i saw this item named signing and it's
work to sign the message BUT this conf produce a request like this :
SAMLRequest=JbtswEP0VgXeJkprIKWEZcOxDDaSNYTk55FJQ1MQiwEXlUKnz96WWoAaS5tArOf
O2eUvkWnVs3fvWHOBXD%2Bijs1YG2fhRkt4ZZjlKZIZrQOYFq9bf71iepKxz1lthFYnWiOC8tGZ
jDfYaXAXuRQp4ONyVpPW%2BY5SiFiKuTddxJ2uOsQMB3kPCA3ccoM6vibCaVq2sa6vAtwmipQNZ
Tvf31ZFE26BOGj7wTKg4wGKQUCfo%2BUmaUwKitQY8lU0371bVPXXQyMDnSbTbluRnvmjSBTwXd
XNVZLxoeHGdZUVe3PCvN%2FWCQxhD7GFnAqrxJcnT7EucpXF2fcxTlhcsy59ItJ%2Ft30rTBOrP
s6qnIWTfjsd9PPl5BIejlzBAVsshcTYSu4sbfA7L34InqznmIWErEjAnfgINxieN1KDsFO6QyJJ
eME20HfsRoHfbvVVSvEZrpezvjQPuoSQZoW9Dc0OgGfsSbu3h7Gfhl08bFXQd4Pl%2FbAxjf1sy
7rKxIgpeQDEdLtnr2cJHnKvp759i6fvGr%2F4A
&RelayState=ss%3Amem%3A3ae3b27dbb32d17fd32b9c4e283e7cdd7c88a1c03a6ceb388b1b
883d50ba0285
&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1
&Signature=BsEfrG2qGVn4s44QCvTuqwUZLs91BIeEnyy57m5JC40YkACmt0PlF0luNwAqul8A
zswUAxKvagusP7M8RJ4NCStjNohLgp%2F%2FYpZjVfA3jY9WjBp%2Fs62wUYmUWYLdDEIF6Gi%2
FjI2%2BrZYBFLYZRJWUYWUrDRrgcLk5Qc2R018OUkRsY%2Bl%2FjOQ%2FmBFmF5LZ8YhuwPKV%2
Bc6BuT4%2BWkvMqfkHcB74UTHdF%2Bi4jRbdslalsJpOSyHAd8uEHMplJvxA15df4B8LfUWl2Vj
8ZosBUV3gfLehCglB8e9%2FiM3Bo%2BT5JZg%2FQLWjIRJ3qhd4vUI%2Bpz5N7W3CtT28P0YYkq
Qvv2V3Pw%3D%3D
BUT my customer want an authnrequest signed on the assertion not put in
the URL.
Do you get the gap ?
Thibault
Le 15/10/13 22:28, « Cantor, Scott » <cantor.2 at osu.edu> a écrit :
>On 10/15/13 4:05 PM, "thibault2638"
><thibault.juradoleduc at businessdecision.com> wrote:
>
>>I'd like to sign my samlrequest, not by using assertions signature but
>>include signature inside samlrequest initiated by my Shibboleth's SP.
>
>It's very unlikely that you really want to do that or that it will do what
>you think it will, but the setting is here:
>
>https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication
>
>See "signing".
>
>-- Scott
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>
More information about the users
mailing list