SAML encryption

[Alan Buxey]

hi,

> Just to verify, we tried to comment all the key sections in the SP Vendor
> metadata file. Even then the SAML assertion was encrypted. That raised my
> doubt if IDP's key is used to encrypt.
>

are you sure it wasnt still being signed ?

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201008/18210fef/attachment.htm>