<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial,helvetica,sans-serif;"><font size="3">I have a customer running an Oracle based Shibboleth Idp. After setting up their private federation (added session initiator and metadata for them), they attempted to test and then told me that my authn request needs to be signed. The customer indicated that all I needed to do was to add signing="true" to my application defaults. They also indicated that it would have no impact on existing Idps.</font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3">My Application Defaults looks like this:</font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font
size="3"><ApplicationDefaults id="default" policyId="default" REMOTE_USER="eppn" entityID="https://shib.lynda.com/shibboleth-sp" homeURL="https://shib.lynda.com/InCommon"></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3">I updated it to:</font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"> <ApplicationDefaults <span style="font-weight: bold;">signing="true"</span> id="default" policyId="default" REMOTE_USER="eppn" entityID="https://shib.lynda.com/shibboleth-sp" homeURL="https://shib.lynda.com/InCommon"></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3">And then
did a test with Max at PSU. It failed. Max dug up another example of this section as provided as a default for a shib SP install that looks like this:</font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"> <ApplicationDefaults id="default" policyId="default"</span> <span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height:
normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"> entityID="</span><a href="https://sp.example.org/shibboleth" target="_blank" style="color: rgb(53, 66, 88); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255);">https://sp.example.<wbr>org/shibboleth</a><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important;
float: none;">"</span> <span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;">REMOTE_USER="eppn persistent-id targeted-id"</span> <span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;">signing="false" encryption="false"></span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font><font
size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"></span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;">So, my questions are:</span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font><font
size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"></span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;">Do I need to include the encryption setting and have it set to true along with signing="true"?</span></font></div><div
style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;">If these values are not present in the ApplicationDefaults, I presume that Shibboleth defaults them both to false - correct?</span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255,
255, 255); display: inline ! important; float: none;">Is this customer wrong when they indicate that authn request signing will have no impact on existing Idps? I assume they are since PSU's shib connection attempt failed. Or, would setting both encryption and signing on applicationdefaults have prevented the error?</span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><br></font><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"></span></font></div><div style="font-family: arial,helvetica,sans-serif;"><font size="3"><span class="Apple-style-span" style="color: rgb(34, 34, 34);
font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; background-color: rgb(255, 255, 255); display: inline ! important; float: none;"><font style="font-family: arial,helvetica,sans-serif;" size="3">Thanks!</font><br></span></font></div></div></body></html>