SLO Request Not Signed

[Cantor, Scott]

> Interesting.  In looking at the Apache log I do indeed see a Signature query
> param sent, complete with signature.  Since I assume that this is using the
> signing cert, it makes me wonder why my SP is throwing an exception with
> the following errors:

Because it has a bug, I would imagine, or it doesn't support the Redirect binding. It's somewhat unusual in fact for any SP to even notice. Shibboleth is one of the few implementations that requires signed logout messages despite it being an explicit requirement of the profile.

-- Scott