Response to AttributeQuery is not signed

Roman CHRENKO Roman_CHRENKO at tempest.sk
Fri Sep 16 09:16:46 EDT 2016


Hello.
I configured IDP (3.2.1) as an Attribute Authority. It works as expected but responses from it are not signed.
Can you, please, suggest me, how to configure IDP to sign responses to AttributeQuery?

My configuration in relying-party.xml is:
        <bean parent="RelyingPartyByName" c:relyingPartyIds="http://fedora22.rch.org/shibbolethSP">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:encryptAssertions="false" p:signResponses="true" p:skipEndpointValidationWhenSigned="true" />
                    <ref bean="SAML1.AttributeQuery" />
                    <ref bean="SAML1.ArtifactResolution" />
                    <ref bean="SAML2.ECP" />
                    <ref bean="SAML2.Logout" />
                    <ref bean="SAML2.AttributeQuery" />
                    <ref bean="SAML2.ArtifactResolution" />
                    <ref bean="Liberty.SSOS" />
                </list>
            </property>
        </bean>


Roman


More information about the users mailing list