signResponses

[Timothy Legge]

The XML shown should show the signature but I suspect that they do not
validate the signature is valid.  Nor would they verify that the signature
was signed by a trusted key.

Tim

Timothy Legge
timlegge at gmail.com
timlegge at cpan.org


On Wed, Aug 2, 2023 at 3:05 PM Lohr, Donald A - lohrda via users <
users at shibboleth.net> wrote:

> Is there a way to see an acknowledgement in something like the SAML Tracer
> plugin for Firefox or Chrome that the response is signed?
>
> Or would acknowledgement of such a signing be in the Shib IdP logs?
>
> thx,
> Don
>
> --
> D o n a l d   L o h r
> I n f o r m a t i o n   S y s t e m s
> J a m e s   M a d i s o n   U n i v e r s i t y
> 5 4 0 . 5 6 8 . 3 7 3 0
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230802/8534f1fe/attachment.htm>