Does SP3 not sign authn requests by default?

Cantor, Scott cantor.2 at
Sun Jul 22 12:22:27 EDT 2018

As far as I know 3.0 should be signing if the IdP metadata asks for it, so that would be a regression, assuming it worked in 2.x. I'll check into it on Monday. The conditional behavior is very complex. But I would not have expected 3.0 to break it, it was a 2.6 change to complicate all that code.

This even came up back then:

The conclusion was that it was behaving as intended in 2.6 and that it honored the metadata by default.

-- Scott

More information about the users mailing list