signed versus unsigned sp-initiated sso requests

[Tom Scavo]

On Mon, Mar 24, 2014 at 4:40 PM, XiaoXia Dong <x-dong at northwestern.edu> wrote:
>
> We have standard shibboleth IdP 2.4.0, and I have not sure how to answer the
> question about whether a signed or unsigned sp-iniated sso request is
> required. How do I determine what the IdP support or not support? Thanks.

Unless there's some compelling reason to sign the AuthnRequest, you
should send an unsigned request. This is what happens in the
overwhelming majority of cases, so chances are it will Just Work.

Tom