Specified AssertionConsumerService Location as Relative Url

Surinaidu Majji pioneer.suri at gmail.com
Tue Jun 30 00:08:52 EDT 2015


Thank you for the link Peter,
I have gone through the link, We were using IDP-2.4 before migration and we
did not use "*skipEndpointValidationWhenSigned" *property in
relying-party.xml in 2.4 but still we were able to skip the ACS URL checks .

Note: We were not signing any assertions in the IDP-2.4 setup.
Observation:I have seen that in the documenation
"*skipEndpointValidationWhenSigned"
*is for IDP-2.4+.

Queries:
1) IS "*skipEndpointValidationWhenSigned*" applicable for IDP-2.4?
2) Will "*skipEndpointValidationWhenSigned*"work if we don't signing
assertions?
3) May i know that, how to get the information about skipping the ACS URL
check IDP-2.4? Can I post this same query to the dev at shib to get
information about IDP-v3?


On Mon, Jun 29, 2015 at 7:27 PM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Surinaidu Majji <pioneer.suri at gmail.com> [2015-06-29 15:13]:
> > >>  It would be great if you can mention How to ignore ACS URL checks in
> > IDP(3.1.1)?
>
> Sorry, I only know for v2: 'skipEndpointValidationWhenSigned', see
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSAML2SSOProfileConfig
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150630/2730532d/attachment.html>


More information about the users mailing list