Disable assertion encryption

Peter Schober peter.schober at univie.ac.at
Fri Sep 25 08:23:52 UTC 2020


* Ramkumar Ramsubbu <ramkumar.ramsubbu.consultant at nielsen.com> [2020-09-24 19:30]:
> I am new to Shibboleth SSO. We have version 3.3.2 IDP installed.

Then you have some updating to do.

> Our SP has requested to disable the saml response. We tried the
> below settings in the relaying-party.xml. But still we can see the
> SAML response is encrypted in the browser.

p:encryptAssertions="false" works as expected.
But that the config snippet you posted isn't well-formed XML
(Cf. the archive copy at
http://shibboleth.net/pipermail/users/2020-September/048174.html )
maybe that prevented it from even being loaded?

-peter


More information about the users mailing list