Disable encryption on SAML response

[Klingenstein, Nate]

Yes, that's the right setting to change.  You can inspect the outbound assertion by turning up the logging in logback.xml and verify that it is being sent unencrypted and successfully.  If it's not, I'd figure out why.

400 Bad Request is more indicative of something bad, like this payload getting delivered to the wrong address, or a lazy implementation.  Either way, I would expect to find more answers at the SP side.
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Rafael Peroco <rafaelp at xlsol.com>
Sent: Wednesday, January 24, 2018 4:44:33 PM
To: Shib Users
Subject: Re: Disable encryption on SAML response

Nate,

Thank you for your answer.

I've followed your instructions but keep getting "400 Bad request" from SP.

For confirmation, I set:
idp.encryption.optional = true

Is that right?

Em qua, 24 de jan de 2018 às 21:53, Klingenstein, Nate <nklingenstein at calstate.edu<mailto:nklingenstein at calstate.edu>> escreveu:

Rafael,



You need to set encryption to be optional using idp.properties.  That won’t disable it, but it will allow the IdP to send assertions that are not encrypted if there is also no key available for encryption to that service provider.



Between that setting and ensuring there is no encryption key, you should be set.



Take care,

Nate.



From: users [mailto:users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>] On Behalf Of Rafael Peroco
Sent: Wednesday, January 24, 2018 3:45 PM
To: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: Disable encryption on SAML response



Is there a way to disable the SAML response encryption?



The SP side (Oracle) is saying that need response without cryptography.



Thanks


--

RAFAEL PEROCO

+55 11 4210-0550<tel:+551142100550>

+55 21 2018-1310<tel:+552120181310>

+55 44 99142-2910<tel:+5544991422910>



XL SOLUTIONS

www.xlsol.com<http://www.xlsol.com>

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
--
RAFAEL PEROCO
+55 11 4210-0550<tel:+551142100550>
+55 21 2018-1310<tel:+552120181310>
+55 44 99142-2910<tel:+5544991422910>

XL SOLUTIONS
www.xlsol.com<http://www.xlsol.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180125/6efc2cac/attachment.html>