IdP integrating with VMWare Horizon as an SP?

[Ryan Rumbaugh]

We have a working SSO configuration with Horizon. It’s been a while, but I think their SP metadata contained an encryption certificate and it wasn’t until, after getting frustrated, that I turned off encryption that it began working. Not the first time a commercial SSO product provided an encryption cert while not actually supporting it, sadly.

--
Ryan Rumbaugh


From: users <users-bounces at shibboleth.net> on behalf of Tunturi Timo via users <users at shibboleth.net>
Date: Thursday, January 26, 2023 at 1:05 AM
To: users at shibboleth.net <users at shibboleth.net>
Cc: Tunturi Timo <timo.tunturi at aalto.fi>
Subject: Re: IdP integrating with VMWare Horizon as an SP?
Non-NU Email

On Tue, 2023-01-10 at 15:39 -1000, Baron Fujimoto via users wrote:
> What we have seen is when they try to import our metadata, they get
> some "Invalid static metadata" error, but unfortunately nothing more
> specific than that.

We had a problem with Horizon where it wouldn't load the IdP metadata
if the metadata didn't have key use (signing/encryption) defined
explicitly per key.

-- Timo
--
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!PvXuogZ4sRB2p-tU!D1O1WlPoyAyIc5seQP7j5abxlWAalB73JLTDSVeusJySUBR8ejq_0F8kmilLjEbPoHKUctZvliv_2tJZPPMNhw$<https://urldefense.com/v3/__https:/shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!PvXuogZ4sRB2p-tU!D1O1WlPoyAyIc5seQP7j5abxlWAalB73JLTDSVeusJySUBR8ejq_0F8kmilLjEbPoHKUctZvliv_2tJZPPMNhw$>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230126/5a60ba45/attachment.htm>