SP Requires Signed IdP Cert...

[Cantor, Scott]

> Thanks all for the reply, seems I'm misunderstanding what the Back-channel.

If the vendor is the one that told you it was the back-channel, then they're the ones confused. And they are by definition since what they're asking for is a bad idea. Not only will their system less secure, you're signing up to annual key rotation with that vendor. I'd urge you to consider whether that's something you can sign on to.

Beyond that, Brent probably identified the error.

-- Scott