Auth Request not signed

[Amit Dongaonkar]

Hi Scott,
Thanks for the response. This went to the wrong folder in my outlook and I missed it

Here is what I have in the IdP metadata:
 <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">



I am going in circles trying to figure out what is happening.

Thanks and Regards,

Amit Dongaonkar
Director of Technology
P: +1 248 284-4035
E: amitd at nitssolutions.com<mailto:amitd at nitssolutions.com>

40850 Grand River, Ste.100
Novi, MI 48375

[https://ci3.googleusercontent.com/mail-sig/AIorK4wN_LK0U1i8MJLebyClqc5QbfLfy6p80P3eayuEzCWRmVFtrRQ5KpMpZi4c9cS_GaAZBMwC98Q]

CONFIDENTIALITY NOTICE: This e-mail and any accompanying document(s) contain confidential information which is privileged and intended only for the addressee hereof.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of this e-mail and/or accompanying document(s) is strictly prohibited.  If you have received this e-mail in error, please immediately notify the sender at the above e-mail address.



________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, November 27, 2023 8:28 AM
To: Shib Users <users at shibboleth.net>
Cc: Amit Dongaonkar <amitd at nitssolutions.com>
Subject: Re: Auth Request not signed

> The Shibboleth SP is not sending a signature in the Auth Request even
> though the IdP metadata has the WantAuthnRequestsSigned set to true

Assuming it's actualy true, then it is not in fact seeing that in the metadata. QED.

-- Scott







-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231205/992460f2/attachment.htm>