Sending the SAMLReply/Assertion

[Spencer Thomas]

Your SP metadata provides them with the encryption cert to use and the supported algos and the IdP builds from that menu. So, the only thing you'd be really auditing is your own config.

- Steve

I have had plenty of cases where I want to know what my clients are actually doing, so that I can understand the impact of a proposed change. In this case, it’s probably less critical, since one would expect that most IdPs can adapt to changes in the encryption list. But it’s still a real use case.


--
Spencer Thomas
Technical Architect / JSTOR and Artstor
ITHAKA<https://www.ithaka.org/> / 301 E. Liberty St, Suite 250, Ann Arbor, MI 48104
Email: Spencer.Thomas at ithaka.org<mailto:Spencer.Thomas at ithaka.org>
Voicemail: +1-734-887-7004


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210712/502201f3/attachment.htm>