Is skipEndpointValidationWhenSigned still an issue?
putmanb at georgetown.edu
Wed May 25 13:04:44 EDT 2016
On 5/25/16 12:34 PM, Cantor, Scott wrote:
> Hmm. IIRC the Shibboleth SP doesn't include ProtocolBinding by default either,
That wasn't my recollection, actually, I think I've always seen
ProtocolBinding being sent. At least as far back as I can remember. So
I looked at one of our pretty vanilla SP's running 2.5.5, and it does
> so given that that's the normal case I'd be interoperating with SPs with this setting, I doubt that should matter. I think it defaults to a binding based on precedence rules in the system.
I don't know the code well enough to evaluate it.
For the OP: you might get some more info with logging on DEBUG. It
might at least provide more context for exactly why it's failing.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the users