how to force idp v3 to sign saml assertion

[Jehan Procaccia]

Le 05/05/2017 à 10:02, Brent Putman a écrit :
>
>
>
> On 5/5/17 3:43 AM, Jehan Procaccia wrote:
>>
>> could it be a feature or parameter in my IDP (v 3.2.1) that isn't set 
>> correctly in order to force singing SAML assertions ?
>>
>
> https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration#SecurityConfiguration-SigningandEncryptionEnablement
>
>
>
>
>
I had already set in conf/idp.properties :

/idp.encryption.optional = false/

did I miss understood that boolean , I must be set to "true" to force 
saml assertion to be signed ?

thanks .

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170505/04a2bc69/attachment-0001.html>