Assertion encryption

[Larissa Riedel]

Thank you guys for the accurate explanations and the links.
That helped me quite a lot.

Best regards,
Larissa

2017-07-06 9:30 GMT+02:00 Peter Schober <peter.schober at univie.ac.at>:

> * Larissa Riedel <larissa.riedel88 at gmail.com> [2017-07-05 21:21]:
> > I try to figure out how the concept of the assertions works.
> > Is there an assertion from the SP to the IDP, or is it just a "request"?
> If
> > so, is the assertion encrypted?
>
> It is just a request from the SP, and that's not encrypted (though the
> NameID could, IIRC, though that's not used in practice) and everything
> in the request can easily seen in SAML Tracer.
>
> The request might be signed by the SP, though. The majority don't sign
> their requests (because the advantages of signing are debatable) but
> it's not that uncommon either.
>
> Regarding actual assertions (sent from the IDP to the SP) others have
> answered that already, I think.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170709/f1face9a/attachment.html>