Is skipEndpointValidationWhenSigned still an issue?

[Brent Putman]

On 5/25/16 12:34 PM, Cantor, Scott wrote:
> Hmm. IIRC the Shibboleth SP doesn't include ProtocolBinding by default either, 

That wasn't my recollection, actually, I think I've always seen
ProtocolBinding being sent. At least as far back as I can remember.  So
I looked at one of our pretty vanilla SP's running 2.5.5, and it does
send ProtocolBinding.


> so given that that's the normal case I'd be interoperating with SPs with this setting, I doubt that should matter. I think it defaults to a binding based on precedence rules in the system.

I don't know the code well enough to evaluate it.


For the OP: you might get some more info with logging on DEBUG.  It
might at least provide more context for exactly why it's failing.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160525/ff35e2ab/attachment.html>