Force SP to sign SOAP messages

[Cantor, Scott]

On 1/6/20, 12:29 PM, "users on behalf of David Sommer" <users-bounces at shibboleth.net on behalf of david97sommer at gmail.com> wrote:

> I haven't found a way to make <SSO> use HTTP-Artifact, therefore the SessionInitiator. Is there a way to use <SSO> if i
> want the IdP to send the <Response> by artifact?

That's a matter of metadata in some sense; if you only want artifact support, you'd update your metadata and edit protocols.xml to adjust the auto-wiring by commenting out the bindings you don't want.

Doing both at once is, I think, most easily done by adjusting the order of the bindings in that file, but that's also going from memory. It couldn't hurt to try it.

-- Scott