<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div>I got a message from a fed member this morning:</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;">Hi Mike,<u></u><u></u></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;">Was looking into something for a mutual customer and spotted that your Shib SP is signing its SAML requests.<u></u><u></u></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;">This isn’t supported in either of the two OpenAthens products being used by our customers in the UK Access
Management federation so could cause problems for a significant number of their members (should they subscribe to your service).<u></u><u></u></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><br></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: transparent; font-style: normal;">How do I turn this off? It must have been a default setting as I have never changed this from my initial install in 2009.</div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: transparent; font-style: normal;"><br></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: transparent; font-style: normal;">In the config, I see this:</div><div class="MsoNormal" style="color: rgb(34, 34,
34); font-family: arial, sans-serif; font-size: 13px; background-color: transparent; font-style: normal;"><br></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: transparent; font-style: normal;"><div style="font-size: 12.571428298950195px;"> <PolicyRule type="XMLSigning" errorFatal="true"/></div><div style="font-size: 12.571428298950195px;"> <PolicyRule type="SimpleSigning" errorFatal="true"/></div><div style="font-size: 12.571428298950195px;"><br></div><div style="font-size: 12.571428298950195px;">With a warning above these settings that if you do not know what you are doing, don't screw with it. Since I don't know what I am doing :) - I ask you folks!</div></div></div></div></body></html>