<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"
xmlns:ns0="urn:schemas-microsoft-com:office:smarttags">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have both an RP and IDP running locally. I’d like to
test the scenario where the request from RP is not signed appropriately (or has
been tampered with on the way over).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>What specifically in the IDP would cause it to reject a RP
request that say has not been signed as expected? I have tried modifying the certificates
in rp and idp metadata on RP side and have not been able to cause the IDP to reject
a AuthNRequest.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>My IDP does have the following defined in the
SecurityPolicy:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 color=black
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:black'> </span></font><font
size=2 color=teal face="Courier New"><span style='font-size:10.0pt;font-family:
"Courier New";color:teal'><</span></font><font size=2 color="#3f7f7f"
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:#3F7F7F'>security:Rule</span></font><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'> <font color="#7f007f"><span
style='color:#7F007F'>xsi:type</span></font><font color=black><span
style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"samlsec:SAML2AuthnRequestsSigned"</span></font></i><font
color=teal><span style='color:teal'>/></span></font><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 color=black
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:black'> </span></font><font
size=2 color=teal face="Courier New"><span style='font-size:10.0pt;font-family:
"Courier New";color:teal'><</span></font><font size=2 color="#3f7f7f"
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:#3F7F7F'>security:Rule</span></font><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'> <font color="#7f007f"><span
style='color:#7F007F'>xsi:type</span></font><font color=black><span
style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"samlsec:ProtocolWithXMLSignature"</span></font></i>
<font color="#7f007f"><span style='color:#7F007F'>trustEngineRef</span></font><font
color=black><span style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"shibboleth.SignatureTrustEngine"</span></font></i><font
color=teal><span style='color:teal'>/></span></font><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 color=black
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:black'> </span></font><font
size=2 color=teal face="Courier New"><span style='font-size:10.0pt;font-family:
"Courier New";color:teal'><</span></font><font size=2 color="#3f7f7f"
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New";
color:#3F7F7F'>security:Rule</span></font><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'> <font color="#7f007f"><span
style='color:#7F007F'>xsi:type</span></font><font color=black><span
style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"samlsec:SAML2HTTPRedirectSimpleSign"</span></font></i>
<font color="#7f007f"><span style='color:#7F007F'>trustEngineRef</span></font><font
color=black><span style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"shibboleth.SignatureTrustEngine"</span></font></i><font
color=teal><span style='color:teal'>/></span></font><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=black face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New";color:black'>
</span></font><font size=2 color=teal face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New";color:teal'><</span></font><font
size=2 color="#3f7f7f" face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New";color:#3F7F7F'>security:Rule</span></font><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
<font color="#7f007f"><span style='color:#7F007F'>xsi:type</span></font><font
color=black><span style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"samlsec:SAML2HTTPPostSimpleSign"</span></font></i>
<font color="#7f007f"><span style='color:#7F007F'>trustEngineRef</span></font><font
color=black><span style='color:black'>=</span></font><i><font color="#2a00ff"><span
style='color:#2A00FF;font-style:italic'>"shibboleth.SignatureTrustEngine"</span></font></i><font
color=teal><span style='color:teal'>/></span></font></span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thanks<o:p></o:p></span></font></p>
</div>
<p><FONT FACE="Arial" style="font-size:8pt;"><br />
NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.<br />
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.</FONT></p>
</body>
</html>