<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Thanks, Peter. I read that section which referred to <RelyingParty> for this but I do not use a RelyingParty section in my config. There is no signing element as described in the wiki within my config - Since I do not have this RelyingParty element, I assumed that the signing in the app defaults might be my issue - especially since the relyingparty element defaults to false...</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Peter Schober <peter.schober@univie.ac.at><br> <b><span style="font-weight: bold;">To:</span></b> users@shibboleth.net <br> <b><span
style="font-weight: bold;">Sent:</span></b> Friday, February 15, 2013 8:33 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: SP Signed SAML requests<br> </font> </div> <br>
* Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> [2013-02-15 17:13]:<br>> In my app defaults I also have this:<br>> <br>> <ApplicationDefaults signing="true" id="default" policyId="default"<br>> REMOTE_USER="eppn" entityID="<a href="https://shib.lynda.com/shibboleth-sp" target="_blank">https://shib.lynda.com/shibboleth-sp</a>"<br>> homeURL="<a href="https://shib.lynda.com/InCommon" target="_blank">https://shib.lynda.com/InCommon</a>"><br>> <br>> I just want to confirm - This is the signing setting that I should<br>> set to "false" - Correct?<br><br>I already pointed you to the documentation and named the specific<br>setting. The most specific URL I can get out of the wiki is:<br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication#NativeSPApplication-RelyingPartyAttributes"
target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication#NativeSPApplication-RelyingPartyAttributes</a><br>Then search for the attribute "signing". Here's the full text, which<br>should need no further explanation:<br><br> * signing ("true", "false", "front", or "back") (defaults to "false")<br><br> Controls outbound signing of XML messages. If "true", all are<br> signed. If "front", only front-channel messages are signed. If "back",<br> only back-channel messages are signed.<br><br>So either you did change a default or the default has changed in the<br>meantime. (I'd recommend to carry over your config to a new updated<br>config at some point.)<br>-peter<br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div>
</div></body></html>