skipEndpointValidationWhenSigned is no more honored after IdP 3 upgrade

Youssef Ghorbal youssef.ghorbal at pasteur.fr
Sat Jul 18 21:57:34 EDT 2015


> On 19 Jul 2015, at 03:47, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 7/18/15, 9:33 PM, "users on behalf of Youssef Ghorbal" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:
> 
>> How can I push diagnostics further ?
> 
> It's a bug, the code isn't checking for a signature at the binding, only on the message. It will work the ordinary POST binding were used with a signed request, it won't work otherwise until it's fixed. Please file a bug.

Ok !
Thank you for your help.

Youssef


More information about the users mailing list