Is skipEndpointValidationWhenSigned still an issue?

[Yavor Yanakiev]

Is it possible to be an encoding issue?

https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=-10680&gid=1

https://securelb.imodules.com/controls/login/AssertionConsumerService.aspx?sid=-10680&gid=1

On Wed, May 25, 2016 at 1:13 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 5/25/16, 1:04 PM, "users on behalf of Brent Putman" <
> users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
>
> >That wasn't my recollection, actually, I think I've always seen
> ProtocolBinding being sent.
> >At least as far back as I can remember.  So I looked at one of our pretty
> vanilla SP's
> >running 2.5.5, and it does send ProtocolBinding.
>
> Ok, might be implicated then. I still thought it defaulted, but I would
> have to look at it.
>
> In any case, it's bad form regardless obviously. If it wants to send a
> request and expect the IdP to ignore metadata processing it, then it
> doesn't follow that it should be omitting important details.
>
> -- Scott
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Yavor Yanakiev
Systems Developer for Identity Services
212-992-7585
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160525/bb1866ce/attachment.html>