<div dir="ltr"><div><div>But the response returned to my SP is signed. In the Assertion object, the isSigned() flag is true.<br><br></div>Did I miss anything?<br><br></div>Thanks,<br>Yaowen<br></div><div class="gmail_extra">
<br clear="all"><div>Yaowen</div>
<br><br><div class="gmail_quote">On Wed, Apr 17, 2013 at 4:48 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 4/17/13 7:35 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>From the SAMLResponse of the <a href="http://testshib.org" target="_blank">testshib.org</a> <<a href="http://testshib.org" target="_blank">http://testshib.org</a>> IdP, it<br>
<div class="im">>contains a different certificate in the <Response> tag.<br>
<br>
</div>I just looked at a response from it. Since it's not signing the response,<br>
there is no certificate in it. So I would guess that given nothing would<br>
have changed, that you are probably mistaken about the issue.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>