Educause SSO and IdP 3.3.0

[Vonblohn, Kyle]

We are using 3.3.0 with Educause and it's working fine for us.  If you can, I would turn the logging to debug for SAML (assuming it's a test system) and compare the assertions as Nate suggested.

Good luck,
Kyle

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Klingenstein, Nate
Sent: Tuesday, November 29, 2016 2:40 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Educause SSO and IdP 3.3.0

Kathy,

> The SAML request and response appear to be the same for both versions but as the assertions are encrypted we cannot be sure.

If this is insensitive data and a test server, you might add logging for the assertion before it's sent.  You should find options for that in logback.xml.  I'm not sure exactly which shortcut or flag will do that.

    <!-- Logs unencrypted SAML at DEBUG level -->
    <logger name="org.opensaml.saml.saml2.encryption.Encrypter" level="${idp.loglevel.encryption:-INFO}" />

If the outbound assertion looks identical and it's being sent to the same place, that's a puzzle.

Take care,
Nate.
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net