idp sha2 signing

Qian, Yi yqian at ku.edu
Tue Oct 7 12:58:47 EDT 2014


Hello,

University of Kansas is trying to federate with Equifax, they requires sha2 signing, our IdP is Shibboleth 2.4 and I believe it is using sha1, I found a contribution from shib wiki https://wiki.shibboleth.net/confluence/display/SHIB2/Changing+IdP+Signature+Method+Algorithm to change shib IdP using sha2.

Questions

1.      Is it still accurate? the last update is little over a year ago.

2.      The warning message indicate the signing method change is all or nothing, I cannot adjust per individual SP, is that correct?

3.      Since we have quite bit SPs, so before I move down the road, is there a way to check with SPs that they support sh2 signing?

Regards,
Yi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141007/012701c6/attachment.html 


More information about the users mailing list