Docusign

[Cantor, Scott]

On 8/8/16, 9:20 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> 2. They require a "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
> NameID, and they mean it.  The identifier must be persistent because they
> don't allow renames.

That will go well. I guess that might be the push I need to finally get it supported here.
    
> 4. If you select Signed Requests, they have a bug that will always do a 
>    POST, so make sure you put a POST endpoint in for the URL.

I would encourage avoiding signed requests if they don't support encryption, since that means not caring about any keys from them at all, which makes manually provisioning them a lot more palatable.

-- Scott