Sending the SAMLReply/Assertion

[Mak, Steve]

Jan,

                Another idea: Is there an SP API (Soap or otherwise) where I might be able to get the saml assertion from the SP given a session Index?

https://wiki.shibboleth.net/confluence/display/SP3/AssertionExport


                What I’m specifically looking for is things like which hashing and encryption algorithms (and hopefully which certificate was used, i.e. things like SP subject-name and serial number) were used (and by whom).

I want to remind you that the encryption that an IdP uses will be something it picks from your service's supported encryption algos which will be listed in your SP metadata… so if you want to strike an algo off your list you would simply update your sp metadata and communicate that change to the IdP. At least that's what it's there for. I'm not sure if you're implying that IdPs simply pick whatever they want and that's not always the case. Your SP metadata provides them with the encryption cert to use and the supported algos and the IdP builds from that menu. So, the only thing you'd be really auditing is your own config.

- Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210712/d5085436/attachment.htm>