Help with setting up Duo Admin Panel and Shibboleth

Melvin Lasky melvin.lasky at
Fri Jan 28 00:02:19 UTC 2022

Ok yeah, so I do have the WantAssertionsSigned in the metadata from Duo. It
came like that.

So I’m really at a loss as to what I’m supposed to do here :-(

Any suggestions would be greatly appreciated.

*Melvin Lasky*
Associate Director of Enterprise Architecture
Riverdale, NY 10471 <x-apple-data-detectors://1/0>
Phone: 718-862-7410
melvin.lasky at

On Jan 27, 2022, at 6:53 PM, Cantor, Scott <cantor.2 at> wrote:

Response signing is defaulted, adding p:signAssertions turns that on, as
does adding WantAssertionsSigned to the metadata. I don't know that they
require signed responses (which would be dumb, that's forcing people to
sign twice for no reason) but I tend not to turn it off simply to avoid
extra config work since I use the metadata flag to do this, not the relying
party approach.

They handle encryption fine.

-- Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list