shibboleth.SAML2PersistentGenerator question
Cantor, Scott
cantor.2 at osu.edu
Mon Feb 22 13:22:05 UTC 2021
Basically that's all impossible, so that leaves "something you think is the same isn't", and there's not really any way to debug that but you.
The inputs to the calculation are obviously the principal, salt, and SP entityID, and then the digest and encoding. One of them's not the same, that's really all there is to it.
I would maybe be looking at principal name and perhaps see if subject c14n is not doing what it was doing originally.
-- Scott
More information about the users
mailing list