IdP 3.2.1 integration with Adobe/Okta

[King, David]

Hi everyone,

We have been trying to integrate our mostly vanilla Shibboleth IdP 3.2.1 with Adobe creative cloud (Okta being the SP provider).  We have worked through the non-standard IDs and the requirement of a emailAddress NameID.  However, we are still having a stumbling block with them that I did not see mentioned in the archives or the wiki.

They are now saying that we need to configure our IdP to send SHA1 signatures instead of SHA256.  Did other folks have this issue with Adobe/Okta?  If so, how did you resolve it?  If not, do you have a special relying-party configuration or did you edit the SP metadata?

Thanks in advance for the help,
David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171220/a5066fcb/attachment.html>