Issues Setting up SAML2 with ServiceNow

Sacilowski, Tadeusz ts2878 at tc.columbia.edu
Wed Mar 11 17:50:19 EDT 2015


Thank you all for your help. As a test, I disabled the encryption
requirement for this SP and I stopped seeing this error. I'm still not able
to login to ServiceNow but I think it has more to do with an incomplete
setup on the ServiceNow side by our consultant. FWIW, the most recent
release of ServiceNow apparently does support encryption:
9.1 Fuji

   - Supports encrypted SAML assertions when Multi-Provider Single Sign-on
   is enabled. See Configuring Users for Multi-Provider Single Sign-On
   <http://wiki.servicenow.com/index.php?title=SAML_2.0_Setup#Configuring_Users_for_Multi-Provider_Single_Sign-On>
   for descriptions of the settings you need to configure.

So I will continue to research this from the SP side.

One quick question, if I may: I'm obviously still fairly new to
Shibboleth... a previous comment above indicated that I have a lot of
unnecessary signing going on. Are there any published best-practices and
security recommendations on these types of things? If I recall correctly, I
set that up based on an Internet2 training document that I found but
perhaps I'm wrong?

Thank you all for the help so far!

Best,
Teddy


On Wed, Mar 11, 2015 at 5:29 PM, Eric Goodman <Eric.Goodman at ucop.edu> wrote:

> > FWIW, I don't believe Service-Now supported encryption when we
> > configured it, but I don't know if that's still true.
>
> My recollection is in agreement with this statement.
>
> --- Eric
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
*Tadeusz Sacilowski*
*Manager, Portal & Mobile Development*
Teachers College, Columbia University
sacilowski at tc.columbia.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150311/94d21999/attachment.html 


More information about the users mailing list