<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Having turned off signing, I have a customer now that reports this error:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;">Error from identity provider:</span><br style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"> Status: urn:oasis:names:tc:SAML:2.0:</span><wbr style="color: rgb(34, 34, 34);
font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;">status:Requester</span><br style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"> Message: Signature required</span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><br></span></span></div><div style="color: rgb(34, 34, 34); font-size: 13px; font-family: arial, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size:
12.571428298950195px;">Will I need to set a rule like this for them?</span></span></div><div style="color: rgb(34, 34, 34); font-size: 12.571428298950195px; font-family: arial, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><br></span></span></div><div style="color: rgb(34, 34, 34); font-size: 13px; font-family: arial, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px;"><span style="font-size: 12.571428298950195px;"><RelyingParty Name="some_entityID</span><a href="https://smtest02.am.joneslanglasalle.com/" needshandler="needsHandler" style="color: rgb(0, 101, 204); font-size: 12.571428298950195px;">.com</a><span style="font-size: 12.571428298950195px;">" signing
="true"/></span><br></span></span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Mike Flynn <shibbolethlynda@yahoo.com><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, February 15, 2013 9:47 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: SP Signed SAML requests<br> </font> </div> <br>
<div id="yiv1311313898"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><span>Thanks, Peter :)</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Peter Schober <peter.schober@univie.ac.at><br> <b><span style="font-weight:bold;">To:</span></b> users@shibboleth.net <br> <b><span style="font-weight:bold;">Sent:</span></b> Friday, February 15, 2013 9:35 AM<br> <b><span style="font-weight:bold;">Subject:</span></b> Re: SP Signed SAML requests<br> </font> </div> <br>
* Mike Flynn <<a rel="nofollow" ymailto="mailto:shibbolethlynda@yahoo.com" target="_blank" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> [2013-02-15 18:01]:<br>> Thanks, Peter. I read that section which referred to <RelyingParty><br>> for this but I do not use a RelyingParty section in my<br>> config. There is no signing element as described in the wiki within<br>> my config - Since I do not have this RelyingParty element, I assumed<br>> that the signing in the app defaults might be my issue - especially<br>> since the relyingparty element defaults to false...<br><br>"The following supported attributes are grouped because they can be<br>overridden per-partner using a <RelyingParty> element:"<br><br>Anyway, <ApplicationDefaults signing="false" ...> will do what you<br>asked for, in case we haven't yet established that :)<br>-peter<br>--<br>To unsubscribe from this list send an
email to <a rel="nofollow" ymailto="mailto:users-unsubscribe@shibboleth.net" target="_blank" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></div></div><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br> </div> </div> </div></body></html>