[External] Re: Need help in shibboleth configuration

[bhupendra.a.singh at accenture.com]

Thanks Peter issue has been already resolved with the below change. Now ESO is working fine.

Thanks for your support.

Thanks & Regards,
Bhupendra

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Wednesday, June 7, 2017 12:40 PM
To: users at shibboleth.net
Subject: [External] Re: Need help in shibboleth configuration

* bhupendra.a.singh at accenture.com <bhupendra.a.singh at accenture.com> [2017-06-07 05:27]:
> Thanks for your reply Scott. Please can you provide the details how
> can I turn off the validation in SP side or IDP side.

Since the error comes from the Shib SP, so that's where you'd have to add validate="false" to the MetadataProvider where you load the MS-ADFS' metadata.

Alternatively, if the metadata for that IDP is loaded from the local file system on the SP (and not dynamically over the network) you could also simply remove all md:RoleDescriptor elements (and their child
elements) from the SAML Metadata describing the IDP. The SP doesn't do anything with the info in there anyway.

-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com