Specified AssertionConsumerService Location as Relative Url

[Surinaidu Majji]

Hello Cantor,
Please see below conversation from @Peter


> 2) Will "*skipEndpointValidationWhenSigned*"work if we don't signing
> assertions?

Ans: It will not apply, no.

> Note: We were not signing any assertions in the IDP-2.4 setup.

That's the potential bug already discussed.

Even I tried to apply "skipEndpointValidationWhenSigned" in our 2.4 IDP
setup. but it does not work means ACS URL(SP-Metadata.xml) is not ignored.


Please correct me if my understanding is not correct..





On Tue, Jun 30, 2015 at 8:38 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/30/15, 10:58 AM, "users on behalf of Surinaidu Majji" <
> users-bounces at shibboleth.net on behalf of pioneer.suri at gmail.com> wrote:
>
> >The highlighted skipEndpointValidationWhenSigned will not work only if i
> >provide signAssertions="never", It will work when signAssertions="always".
>
> No. It has NOTHING to do with signing assertions. Period.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150702/9ecf17e5/attachment-0001.html>