<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<div>Anyone integrated GSA with Shib SSO?</div>
<div><br>
</div>
<div>GSA advertises SAML (SAML2) as an authentication/SSO option, but is not working as expected. IdP side looks fine, but GSA fails to process the Authn response. Google support asked if IdP can include the signature outside the assertion. </div>
<div><br>
</div>
<div>I looked at the raw xml response from the IdP. Signature ( <ds:Signature> element) is nested inside <saml2:Assertion>. Is it possible to have Signature outside the Assertion? </div>
<div><br>
</div>
<div>Thanks,</div>
<div>Datta</div>
<div><br>
</div>
<div> <br>
</div>
</div>
</body>
</html>