<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Thanks Ryan, this worked for us.<br>
<br>
cheers,<br>
Ryan<br>
<br>
On 12-10-12 11:10 AM, Ryan Larscheidt wrote:<br>
</div>
<blockquote
cite="mid:6DF68DD0-5CED-4FBA-9BCF-EBE59CB366F5@doit.wisc.edu"
type="cite">
<pre wrap="">This relying party configuration works for us:
<rp:RelyingParty id="urn:federation:MicrosoftOnline"
provider="${entityid}"
defaultSigningCredentialRef="IdPCredential">
<rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" signAssertions="conditional" encryptAssertions="never" encryptNameIds="never" />
<rp:ProfileConfiguration xsi:type="saml:SAML2ECPProfile" signAssertions="conditional" encryptAssertions="never" encryptNameIds="never" />
</rp:RelyingParty>
Thanks,
Ryan
On Oct 12, 2012, at 09:36 , Ryan Suarez <a class="moz-txt-link-rfc2396E" href="mailto:ryan.suarez@sheridanc.on.ca"><ryan.suarez@sheridanc.on.ca></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On 12-10-12 10:11 AM, Cantor, Scott wrote:
</pre>
<blockquote type="cite">
<pre wrap="">You apparently created a dedicated RelyingParty definition and it doesn't
contain the ECP profile config element in relying-party.xml.
Alternatively, if it's using the DefaultRelyingParty element, the profile
isn't there either.
It was added, I believe, to the default file in newer versions, but it
can't be there if you upgraded and didn't add it.
</pre>
</blockquote>
<pre wrap="">
Right. Upgraded the IdP (to v2.3.6) and had to manually add all the ECP
bits, which I copied from a clean install of v2.3.8:
relying-party.xml
<rp:ProfileConfiguration xsi:type="saml:SAML2ECPProfile"
includeAttributeStatement="true"
assertionLifetime="PT5M"
assertionProxyCount="0"
signResponses="never"
signAssertions="always"
encryptAssertions="conditional"
encryptNameIds="never"/>
handler.xml
<ph:ProfileHandler xsi:type="ph:SAML2ECP"
inboundBinding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
outboundBindingEnumeration="urn:oasis:names:tc:SAML:2.0:bindings:SOAP">
<ph:RequestPath>/SAML2/SOAP/ECP</ph:RequestPath>
</ph:ProfileHandler>
Is this not the right config?
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<pre wrap="">
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Ryan Suarez
System Administrator - IT
Sheridan College
1430 Trafalgar Road
Oakville, ON
L6H 2L1
905.845.9430 x2146</pre>
</body>
</html>