Is skipEndpointValidationWhenSigned still an issue?

Brent Putman putmanb at
Wed May 25 13:04:44 EDT 2016

On 5/25/16 12:34 PM, Cantor, Scott wrote:
> Hmm. IIRC the Shibboleth SP doesn't include ProtocolBinding by default either, 

That wasn't my recollection, actually, I think I've always seen
ProtocolBinding being sent. At least as far back as I can remember.  So
I looked at one of our pretty vanilla SP's running 2.5.5, and it does
send ProtocolBinding.

> so given that that's the normal case I'd be interoperating with SPs with this setting, I doubt that should matter. I think it defaults to a binding based on precedence rules in the system.

I don't know the code well enough to evaluate it.

For the OP: you might get some more info with logging on DEBUG.  It
might at least provide more context for exactly why it's failing.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list