IdP v4 SAML Authentication Proxy Questions

[Cantor, Scott]

On 10/26/20, 12:42 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at signet.id> wrote:

>    I'm getting more SubjectConfirmation mismatches.  It does log the response, but unfortunately not the decrypted
> assertion in any form,

That would be a serious bug. It is possible I debugged things using the IdP I was testing against and not the actual logs on the proxy side and didn't notice.

I can't imagine any way of decrypting it by hand. The SP code could if it were handed the right keypair and was convinced to get far enough in to decrypt it, but that's certainly not a normal workaround.

-- Scott