Auth Request not signed

[Amit Dongaonkar]

Hi Steve,
Thanks for the pointer.
This is what I have right now

<ApplicationOverride id="XXXX" entityID="https://xxxxxxxx/" signing="true">

Is this what you were referring to?


Thanks and Regards,

Amit Dongaonkar


________________________________
From: Mak, Steve <makst at upenn.edu>
Sent: Tuesday, December 5, 2023 2:56 PM
To: Shib Users <users at shibboleth.net>
Cc: Amit Dongaonkar <amitd at nitssolutions.com>
Subject: Re: Auth Request not signed


Amit,



In your shibboleth2.xml > <ApplicationDefaults> do you have signing="true" set?



- Steve



From: users <users-bounces at shibboleth.net> on behalf of Amit Dongaonkar via users <users at shibboleth.net>
Date: Tuesday, December 5, 2023 at 2:52 PM
To: Shib Users <users at shibboleth.net>
Cc: Amit Dongaonkar <amitd at nitssolutions.com>
Subject: Re: Auth Request not signed

Hello All,

Second call for help.



Looking for some pointers with a issue that I am facing right now.

The Shibboleth SP is not sending a signature in the Auth Request even though the IdP metadata has the WantAuthnRequestsSigned set to true, and the Credential Resolver has the right certificate file and key configured.



This is causing the IdP to decline the Auth Requests.

I checked the shibd.log and the Apache log files and no traces of errors.



Any help will be greatly appreciated.



Thanks and Regards,



Amit Dongaonkar







________________________________

From: Amit Dongaonkar
Sent: Wednesday, November 22, 2023 4:44 PM
To: Shib Users <users at shibboleth.net>
Subject: Auth Request not signed



Hello all,

Looking for some pointers with a issue that I am facing right now.

The Shibboleth SP is not sending a signature in the Auth Request even though the IdP metadata has the WantAuthnRequestsSigned set to true, and the Credential Resolver has the right certificate file and key configured.



This is causing the IdP to decline the Auth Requests.

I checked the shibd.log and the Apache log files and no traces of errors.



Any help will be greatly appreciated.







Thanks and Regards,



Amit Dongaonkar



CONFIDENTIALITY NOTICE: This e-mail and any accompanying document(s) contain confidential information which is privileged and intended only for the addressee hereof.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of this e-mail and/or accompanying document(s) is strictly prohibited.  If you have received this e-mail in error, please immediately notify the sender at the above e-mail address.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231205/36e3f105/attachment.htm>