Educause SSO and IdP 3.3.0

[Kathy E. Wright]

Thank you both.

On Nov 29, 2016 3:00 PM, "Vonblohn, Kyle" <kvonbloh at bloomu.edu> wrote:

> We are using 3.3.0 with Educause and it's working fine for us.  If you
> can, I would turn the logging to debug for SAML (assuming it's a test
> system) and compare the assertions as Nate suggested.
>
> Good luck,
> Kyle
>
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of
> Klingenstein, Nate
> Sent: Tuesday, November 29, 2016 2:40 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Re: Educause SSO and IdP 3.3.0
>
> Kathy,
>
> > The SAML request and response appear to be the same for both versions
> but as the assertions are encrypted we cannot be sure.
>
> If this is insensitive data and a test server, you might add logging for
> the assertion before it's sent.  You should find options for that in
> logback.xml.  I'm not sure exactly which shortcut or flag will do that.
>
>     <!-- Logs unencrypted SAML at DEBUG level -->
>     <logger name="org.opensaml.saml.saml2.encryption.Encrypter"
> level="${idp.loglevel.encryption:-INFO}" />
>
> If the outbound assertion looks identical and it's being sent to the same
> place, that's a puzzle.
>
> Take care,
> Nate.
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161130/123e002b/attachment-0001.html>