Getting Signed SAML assertion in application

[Stefan Rasmusson]

If Iam using a IDP proxy set up, is it possible for me to get the SAML
assertion that originated from the real IDP or will I just get the IDP
proxy Assertion?


--
Stefan


On 20 January 2014 15:29, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 1/20/14, 8:32 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >
> >Or it just might. Reading the warning section more closely it says
> >"the XML is passed along unmodified from the issuer".
>
> It is, the use case was delegation via a signed assertion.
>
> It is almost a given that any "back-end" trying to evaluate a standard SSO
> assertion is going to be ignoring the SAML standard in validating it,
> unless the back-end is simply acting as an agent of the front-end. Web
> service delegation with standard SSO tokens is invalid on its face.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140128/565b7103/attachment.html