Issues Setting up SAML2 with ServiceNow
Sacilowski, Tadeusz
ts2878 at tc.columbia.edu
Wed Mar 11 17:50:19 EDT 2015
Thank you all for your help. As a test, I disabled the encryption
requirement for this SP and I stopped seeing this error. I'm still not able
to login to ServiceNow but I think it has more to do with an incomplete
setup on the ServiceNow side by our consultant. FWIW, the most recent
release of ServiceNow apparently does support encryption:
9.1 Fuji
- Supports encrypted SAML assertions when Multi-Provider Single Sign-on
is enabled. See Configuring Users for Multi-Provider Single Sign-On
<http://wiki.servicenow.com/index.php?title=SAML_2.0_Setup#Configuring_Users_for_Multi-Provider_Single_Sign-On>
for descriptions of the settings you need to configure.
So I will continue to research this from the SP side.
One quick question, if I may: I'm obviously still fairly new to
Shibboleth... a previous comment above indicated that I have a lot of
unnecessary signing going on. Are there any published best-practices and
security recommendations on these types of things? If I recall correctly, I
set that up based on an Internet2 training document that I found but
perhaps I'm wrong?
Thank you all for the help so far!
Best,
Teddy
On Wed, Mar 11, 2015 at 5:29 PM, Eric Goodman <Eric.Goodman at ucop.edu> wrote:
> > FWIW, I don't believe Service-Now supported encryption when we
> > configured it, but I don't know if that's still true.
>
> My recollection is in agreement with this statement.
>
> --- Eric
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
--
*Tadeusz Sacilowski*
*Manager, Portal & Mobile Development*
Teachers College, Columbia University
sacilowski at tc.columbia.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150311/94d21999/attachment.html
More information about the users
mailing list