idp v3 - unsolicited sso failing

[Marc Boorshtein]

On Sun, Mar 15, 2015 at 7:24 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> >Second, in this case this is a purely academic discussion because SP
> initiated SSO doesn't sign the authnrequest and it completes just fine.  So
> either there's a bug that is allowing an authnrequest to not signed or
> there's a bug where the unsolicited SSO is being too restrictive regardless
> of settings.
>
> And this would be wrong. If you think the SP is not signing its request,
> you're mistaken (or there's different metadata in the two cases).
>
> You are correct, I was mistaken.  I forgot that this was HTTP-Redirect and
the signature is not in the authnrequest.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150315/6e6b5b84/attachment.html