skipEndpointValidationWhenSigned is no more honored after IdP 3 upgrade

[Cantor, Scott]

On 7/18/15, 9:33 PM, "users on behalf of Youssef Ghorbal" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:

>How can I push diagnostics further ?

It's a bug, the code isn't checking for a signature at the binding, only on the message. It will work the ordinary POST binding were used with a signed request, it won't work otherwise until it's fixed. Please file a bug.

-- Scott