integrating with cloudera hue (SP) via SAML

[Cantor, Scott]

On 12/19/18, 6:25 AM, "users on behalf of Kunal Shah" <users-bounces at shibboleth.net on behalf of ks186033 at gmail.com> wrote:

> I am not sure why as an IDP I need to share my private key. That's the
> major security loophole if that's how Cloudera makes SAML work, and
> possibly I can't do that.

Luckily for your organization you were smart enough to realize that.

You can assume most documentation that says anything about keys is probably wrong, and you won't be far off. Understanding all of those details going in is the price of admission to use this stuff without screwing up, unfortunately. Most of my time spent reading documentation is figuring out what something is really expecting based on my knowledge of the common mistakes the people writing it tend to make. It's like reading the world's dumbest secret code.

-- Scott