shibboleth.SAML2PersistentGenerator question

Cantor, Scott cantor.2 at osu.edu
Mon Feb 22 13:22:05 UTC 2021


Basically that's all impossible, so that leaves "something you think is the same isn't", and there's not really any way to debug that but you.

The inputs to the calculation are obviously the principal, salt, and SP entityID, and then the digest and encoding. One of them's not the same, that's really all there is to it.

I would maybe be looking at principal name and perhaps see if subject c14n is not doing what it was doing originally.

-- Scott




More information about the users mailing list