<div dir="ltr"><div><br></div>Hello Cantor,<div>Please see below conversation from @Peter</div><div class="gmail_extra"><br><div class="gmail_quote"><br></div><div class="gmail_quote"><span style="font-size:12.8000001907349px">> 2) Will "*</span><span style="font-size:12.8000001907349px">skipEndpointValidationWhenSign</span><span style="font-size:12.8000001907349px">ed*"work if we don't signing</span><br style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">> assertions?</span><br style="font-size:12.8000001907349px"><br style="font-size:12.8000001907349px"><span style="font-size:12.8000001907349px">Ans: It will not apply, no.</span><br style="font-size:12.8000001907349px"></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span class="im" style="font-size:12.8000001907349px">> Note: We were not signing any assertions in the IDP-2.4 setup.<br><br></span><span style="font-size:12.8000001907349px">That's the potential bug already discussed.</span><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px">Even I tried to apply "</span><span style="font-size:12.8000001907349px">skipEndpointValidationWhenSign</span><span style="font-size:12.8000001907349px">ed</span><span style="font-size:12.8000001907349px">" in our 2.4 IDP setup. but it does not work means ACS URL(SP-Metadata.xml) is not ignored.</span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px">Please correct me if my understanding is not correct..  </span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><span style="font-size:12.8000001907349px"><br></span></div><div class="gmail_quote"><br></div><div class="gmail_quote">On Tue, Jun 30, 2015 at 8:38 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On 6/30/15, 10:58 AM, "users on behalf of Surinaidu Majji" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:pioneer.suri@gmail.com">pioneer.suri@gmail.com</a>> wrote:<br>
<br>
>The highlighted skipEndpointValidationWhenSigned will not work only if i<br>
>provide signAssertions="never", It will work when signAssertions="always".<br>
<br>
</span>No. It has NOTHING to do with signing assertions. Period.<br>
<div class=""><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div></div>