<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:12pt"><div><span>Thanks! It's working fine once i set the Destination attribute of AuthnRequest.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span>It didn't complain (of Destination attribute missing) for unsigned AuthnRequest though.</span></div><div><br></div> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span
style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, 20 March 2014 7:53 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Signed AuthnRequest<br> </font> </div> <div class="y_msg_container"><br>On 3/20/14, 8:03 AM, "Vasu Y" <<a shape="rect" ymailto="mailto:vyal2k@yahoo.com" href="mailto:vyal2k@yahoo.com">vyal2k@yahoo.com</a>> wrote:<div class="yqt4713259573" id="yqtfd51636"><br clear="none"><br clear="none">>My SP is sending a signed AuthnRequest, but at shibboleth IDP end, i see<br clear="none">>errors.<br clear="none">>AuthnRequests that are not signed are working fine. Also signed Logout<br clear="none">>Requests seems to work fine.</div><br clear="none"><br clear="none">I don't think the IdP omits the Destination check based on whether the<br clear="none">message was signed (though it's of no value in unsigned cases),
but<br clear="none">regardless, you are failing to follow the standard and not setting a<br clear="none">Destination attribute.<br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none"><br clear="none">--<br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><div class="yqt4713259573" id="yqtfd91671"><br clear="none"></div><br><br></div> </div> </div> </div></body></html>