Danish Nemlogin sha256 AuthRequest

[Cantor, Scott]

On 6/25/18, 5:51 PM, "users on behalf of Bo Lorentsen" <users-bounces at shibboleth.net on behalf of bl at moch.dk> wrote:

> As I understands it, there are two ways to make this work, tinkering with the idP metadata by injection a
> <ds:SignedInfo> block,

The metadata extension for algorithm support handling is not in any way connected to the SignedInfo element.

> or inside the shibboleth2.xml file, using application override :

Yes. Your configuration doesn't appear superficially wrong to me, so there's really nothing else I could say about it. It's not right in some subtle way or you're not actually using that configuration.

Avoiding overrides is always the correct move, so your first step should be to dump that and collapse back into ApplicationDefaults, and then see what you get.

-- Scott