skipEndpointValidationWhenSigned is no more honored after IdP 3 upgrade
Youssef Ghorbal
youssef.ghorbal at pasteur.fr
Sat Jul 18 21:57:34 EDT 2015
> On 19 Jul 2015, at 03:47, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> On 7/18/15, 9:33 PM, "users on behalf of Youssef Ghorbal" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:
>
>> How can I push diagnostics further ?
>
> It's a bug, the code isn't checking for a signature at the binding, only on the message. It will work the ordinary POST binding were used with a signed request, it won't work otherwise until it's fixed. Please file a bug.
Ok !
Thank you for your help.
Youssef
More information about the users
mailing list