SLO Request Not Signed

[Brian Moon]

I'm forming a message right now to the SimpleSAMLphp user group to see if
they have any ideas what's going on with the SP.  Want me to check back in
once I figure out a solution?


Brian Moon
Senior System Administrator
Enterprise Systems
Santa Clara University
Office: 408.554.4830
bmoon at scu.edu

On Thu, Apr 13, 2017 at 5:30 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Interesting.  In looking at the Apache log I do indeed see a Signature
> query
> > param sent, complete with signature.  Since I assume that this is using
> the
> > signing cert, it makes me wonder why my SP is throwing an exception with
> > the following errors:
>
> Because it has a bug, I would imagine, or it doesn't support the Redirect
> binding. It's somewhat unusual in fact for any SP to even notice.
> Shibboleth is one of the few implementations that requires signed logout
> messages despite it being an explicit requirement of the profile.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170413/d943bd9f/attachment-0001.html>