Specified AssertionConsumerService Location as Relative Url

Peter Schober peter.schober at univie.ac.at
Tue Jun 30 03:54:01 EDT 2015


* Surinaidu Majji <pioneer.suri at gmail.com> [2015-06-30 06:09]:
> Note: We were not signing any assertions in the IDP-2.4 setup.

That's the potential bug already discussed.

> Observation:I have seen that in the documenation
> "*skipEndpointValidationWhenSigned"
> *is for IDP-2.4+.
> 
> Queries:
> 1) IS "*skipEndpointValidationWhenSigned*" applicable for IDP-2.4?

That's what "2.4+" is intended to mean, "2.4 and higher", i.e. >=2.4
I does not mean, as you seem to imply, "releases higher than 2.4" (>2.4).
(That would also match the empty set, as there is no IDPv2 release
higher than 2.4.x. and IDPv3 docs and configuration are seperate.)

> 2) Will "*skipEndpointValidationWhenSigned*"work if we don't signing
> assertions?

It will not apply, no.

> 3) May i know that, how to get the information about skipping the
> ACS URL check IDP-2.4?

I've pointed you to the documentation.

> Can I post this same query to the dev at shib to get information about
> IDP-v3?

If you can't figure it out based on the previous configuration
parameter name and the new style of configuration for v3, sure.
All people on the dev list will be subscribed here too, though.
-peter


More information about the users mailing list