Electronic signatures

[Nate Klingenstein]

The one option that people haven’t mentioned is signing authentication requests.  I don’t know whether that’s an option in your environment, but it’s the alternative.

> On May 23, 2016, at 11:47, Eric Goodman <Eric.Goodman at ucop.edu> wrote:
> 
> My (additional) assumption has always been that if you want to use ForceAuthn in this way that you need to audit the IdPs to ensure this behavior, or at least document it clearly to the IdP leveraging your service, since it's so common for IdPs to be out of compliance or to be in compliance in meaningless ways (e.g., kerb/IWA). 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160523/573eabb5/attachment.html>