Can encryptAssertions be configured for a specific SP

Lohr, Donald lohrda at jmu.edu
Wed Apr 8 16:45:51 EDT 2015


I'm not sure that I'm fully following the context of your reply.

Are you saying to update or add additional comments to the 
SHIB2/IdPXMLSigEnc web page.

I still consider myself as a very young Shibboleth person and at times 
can read all the documentation the world on a subject and still not see 
or find what I am exactly looking for or do not understand the content 
or the context in which the author choose to pass along the knowledge.  
The additional research was a quest to find a specific example like the 
one I included earlier in my "4/8/15, 2:18 PM" posting. Also my research 
was into my own Shibboleth IdP.

Having said that, does the example in my earlier post look like a 
workable solution to set a specific SP to have encryptAssertions="never" 
and keep the DefaultRelyingParty at encryptAssertions="conditional" ?


Thanks,
Don

On 04/08/2015 02:07 PM, Cantor, Scott wrote:
> On 4/8/15, 2:18 PM, "Lohr, Donald" <lohrda at jmu.edu> wrote:
>
>
>> Yes, V2 Shibboleth.  After reviewing the url you provided and also doing
>> some additional research, I came up with the following example:
> If there's something that should be added to the page, please do so, or
> add a comment or whatever, we don't intend that it require any sort of
> additional research to set a few flags.
>
> -- Scott
>

-- 
D o n a l d   L o h r

i n f o r m a t i o n   s y s t e m s
j a m e s   m a d i s o n   u n i v e r s i t y

5 4 0 . 5 6 8 . 3 7 3 0



More information about the users mailing list