Integration with a Simitive SP

[Cantor, Scott]

On 9/7/16 4:31 AM, Todd, James wrote:
> 
> Also, I’m hoping that my horror at being asked for my IdPs private key
> is justified.

You probably should be telling your bosses that any company that bad at
this really shouldn't be trusted with your university's data. I've done
that in a couple of cases.

> I was under the impression my IdP would encrypt the
> assertion with their public key which could only be decrypted by their
> private key. Even just for my own sanity I’m right, right?

Yes, that's how encryption with assymetric keys works generally.

> The vendor is now saying that *my* side of the bargain is holding
> up the project and I’m in no mood to get the blame for this!

If it makes you feel any better, this is pretty frequently what happens
when one side is running Shibboleth and the other is using Ping but
typically the roles are reversed. Probably doesn't make you feel any
better but I had to get that off my chest.

-- Scott