Box.net integration with shib 2.x

Cantor, Scott cantor.2 at osu.edu
Thu Jun 11 14:31:54 EDT 2015


On 6/11/15, 4:36 PM, "Rich Graves" <rgraves at carleton.edu> wrote:


>
>They have asked me what key they should use for encryption. I thought I 
>was encrypting my assertions to their key that they publish in their 
>metadata. Am I confused, or are they, or both?

They're confused. So good sign there. ;-(

It's whatever is in their metadata, yes. You don't have to do anything 
special.

>They are apparently using https://services.box.com/sp as their entityID 
>and I am getting their metadata from InCommon. I have no custom 
>relying-party.

Same for us, I think (I know the SP is that entityID, and I'll verify 
we're not disabling encryption.)

-- Scott



More information about the users mailing list