Help with setting up Duo Admin Panel and Shibboleth

[Melvin Lasky]

Ok yeah, so I do have the WantAssertionsSigned in the metadata from Duo. It
came like that.

So I’m really at a loss as to what I’m supposed to do here :-(

Any suggestions would be greatly appreciated.

*Melvin Lasky*
Associate Director of Enterprise Architecture
Riverdale, NY 10471 <x-apple-data-detectors://1/0>
Phone: 718-862-7410
melvin.lasky at manhattan.edu
www.manhattan.edu

On Jan 27, 2022, at 6:53 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

Response signing is defaulted, adding p:signAssertions turns that on, as
does adding WantAssertionsSigned to the metadata. I don't know that they
require signed responses (which would be dumb, that's forcing people to
sign twice for no reason) but I tend not to turn it off simply to avoid
extra config work since I use the metadata flag to do this, not the relying
party approach.

They handle encryption fine.

-- Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220127/3c6133b7/attachment.htm>