IdP implementation roadmap

Cantor, Scott cantor.2 at
Mon Apr 22 16:08:15 EDT 2019

On 4/22/19, 3:35 PM, "users on behalf of Yakov Revyakin" <users-bounces at on behalf of yrevyakin at> wrote:

> It looks like Cyberark doesn't recognize NameID section.

I understand that you think it's a logical assumption that documentation and error messages are going to be meaningful, but the reality isn't that simple and I doubt that's what the error is.

As for what's different, one has signed assertions and one has signed responses and signed assertions. So the inference is that they break on signed responses, which is a bug, probably not the last you'll have to work around.

And once it's working more or less, then the final step is to test it with a real Format and see if it works, at which point you've proven you don't need "unspecified".

-- Scott

More information about the users mailing list