OpenAI SSO integration with Shibboleth IdP

[Peter Schober]

Mathew, Sunil <smathew at hbs.edu> [2024-06-11 13:15 CEST]:
> I adjusted AuthnRequestsSigned and WantAssertionsSigned as per your email.

So you made up those values yourself? Based on what knowledge about
the SP implementation? (Seriously asking, I must have missed this in
the documentation you shared.)

> > the metadata for that SP does not contain a key descriptor to verify any signatures with
> 
> Do I get this from OpenAI?

I was merely trying to make sense of the WARN messages you shared.

To me that suggested that the message was signed (which implies that
the SP supplies you with a public key to verify that signature, yes)
but I may be wrong about all this. I note that you didn't post an
ERROR message, only WARN -- where there no ERRORs in the log? I assume
there must have been if you're getting an error message in the web
browswer?

-peter