<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span>Thanks, Peter. I see this:</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><code style="margin-top: 0px; color: rgb(51, 51, 51); font-size: 13px; line-height: 17.328125px;">requireSignedAssertions</code><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;"> (boolean) (defaults to false)</span><br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0,
0); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;"><br></span></span></div><div style="font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(51, 51, 51); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;">In my app defaults I also have this:</span></span></div><div style="font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(51, 51, 51); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;"><br></span></span></div><div style="background-color: transparent;"><span><span><font
color="#333333" face="Arial, Helvetica, FreeSans, sans-serif" size="2"><span style="line-height: 17.328125px;"><ApplicationDefaults <span style="font-weight: bold;">signing="true"</span> id="default" policyId="default" REMOTE_USER="eppn" entityID="https://shib.lynda.com/shibboleth-sp" homeURL="https://shib.lynda.com/InCommon"></span></font><br></span></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;"><br></span></span></div><div style="font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(51, 51, 51); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px;
line-height: 17.328125px;">I just want to confirm - This is the signing setting that I should set to "false" - Correct?</span></span></div><div style="font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; color: rgb(51, 51, 51); background-color: transparent; font-style: normal;"><span><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px;"><br></span></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Peter Schober <peter.schober@univie.ac.at><br> <b><span style="font-weight: bold;">To:</span></b> users@shibboleth.net <br> <b><span
style="font-weight: bold;">Sent:</span></b> Friday, February 15, 2013 8:04 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: SP Signed SAML requests<br> </font> </div> <br>
* Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> [2013-02-15 15:23]:<br>> How do I turn this off?<br><br>Have a look at the ApplicationDefaults/@signing attribute (or<br>ApplicationOverride/@signing, of course):<br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication</a><br>which could also be overridden for a specific relying party:<br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty</a><br><br>> It must have been a default setting as I have never changed this<br>>from my initial install in 2009.<br><br>The IdP can also signal WantAuthnRequestsSigned="true" in their<br>metadata, another place to look
at,<br>-peter<br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>