Changing signing algorithm for a specific relying party

[Wessel, Keith]

Thanks, Scott and Greg. Problem solved.

Anyone else using SSO into Qualys will need to keep this in mind for an IDP upgrade to V3. Not sure why a security scanning vendor doesn't support SSHA-256, but anyway.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, January 05, 2016 2:06 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Changing signing algorithm for a specific relying party

> I don't see any info in the relying party docs for V3 on how to override the
> signing algorithm for a specific SP. What would I need to add to the block in
> my relying-party.xml for Qualys to use SSHA-1 signatures? I already have a
> block for Qualys to not encrypt assertions, but I'm not sure how to set the
> signing algorithm.

An example is available under
https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration

The syntax isn't great, sorry for that. The ability to do it is part of a low level piece that I didn't wrap very well. It's highly flexible but not friendly.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net