Educause SSO and IdP 3.3.0

[Klingenstein, Nate]

Kathy,

> The SAML request and response appear to be the same for both versions but as the assertions are encrypted we cannot be sure.

If this is insensitive data and a test server, you might add logging for the assertion before it's sent.  You should find options for that in logback.xml.  I'm not sure exactly which shortcut or flag will do that.

    <!-- Logs unencrypted SAML at DEBUG level -->
    <logger name="org.opensaml.saml.saml2.encryption.Encrypter" level="${idp.loglevel.encryption:-INFO}" />

If the outbound assertion looks identical and it's being sent to the same place, that's a puzzle.

Take care,
Nate.