idp v3 - unsolicited sso failing

Cantor, Scott cantor.2 at osu.edu
Sun Mar 15 19:24:42 EDT 2015


>Second, in this case this is a purely academic discussion because SP initiated SSO doesn't sign the authnrequest and it completes just fine.  So either there's a bug that is allowing an authnrequest to not signed or there's a bug where the unsolicited SSO is being too restrictive regardless of settings.

And this would be wrong. If you think the SP is not signing its request, you're mistaken (or there's different metadata in the two cases).

-- Scott



More information about the users mailing list