Banner 9 Application Navigator - sends AuthnRequest as POST

Peter Schober peter.schober at
Mon Dec 10 07:01:41 EST 2018

* Lipscomb, Gary <glipscomb at> [2018-12-10 06:07]:
> The vendor is telling us they can't change it from a POST and that
> we need to reconfigure Shibboleth.

What Rod said. You gave them the wrong endpoint (i.e., the one for
your HTTP-Redirect protocol binding). Providing them with your
endpoint for HTTP-POST binding should Just Work™.

If the software picked that by itself from SAML 2.0 metadata it would
be broken. Providing it with metadata containing only the POST binding
for SSO would avoid even that issue.

More information about the users mailing list