Banner 9 Application Navigator - sends AuthnRequest as POST
Peter Schober
peter.schober at univie.ac.at
Mon Dec 10 07:01:41 EST 2018
* Lipscomb, Gary <glipscomb at csu.edu.au> [2018-12-10 06:07]:
> The vendor is telling us they can't change it from a POST and that
> we need to reconfigure Shibboleth.
What Rod said. You gave them the wrong endpoint (i.e., the one for
your HTTP-Redirect protocol binding). Providing them with your
endpoint for HTTP-POST binding should Just Work™.
If the software picked that by itself from SAML 2.0 metadata it would
be broken. Providing it with metadata containing only the POST binding
for SSO would avoid even that issue.
-peter
More information about the users
mailing list