<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1491045957147_4422">Every now and then an IDP will ask us to sign authN for them and we will add a relying party rule to facilitate this like this:</div><div id="yui_3_16_0_ym19_1_1491045957147_4364"><br></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4191"><RelyingParty Name="</span><a href="http://test-learning-admin-palfinger.cloudapp.net/idp" target="_blank" data-saferedirecturl="https://www.google.com/url?hl=en&q=http://test-learning-admin-palfinger.cloudapp.net/idp&source=gmail&ust=1491132226170000&usg=AFQjCNHfuQARXT-Vk6TTTcrKe9laiJ2Rrg" style="color: rgb(17, 85, 204); font-family: arial, sans-serif; font-size: 12.8px; background-color: rgb(255, 255, 255);" id="yui_3_16_0_ym19_1_1491045957147_4192">http://</a>entityId.com<span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4195">" signing ="true"/> </span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1491045957147_4196"> </span><br></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1491045957147_4345">And everything works fine. I had a request recently for this and added the rule but the customer says that it is not signing the authN.</span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;">In their metadata, we see this:</span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4471"><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:<wbr id="yui_3_16_0_ym19_1_1491045957147_4472">SAML:2.0:metadata" xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank" data-saferedirecturl="https://www.google.com/url?hl=en&q=http://www.w3.org/2000/09/xmldsig%23&source=gmail&ust=1491132226250000&usg=AFQjCNGpxHjaFjt7niy9AVlT31TOTQ7aLg" style="color: rgb(17, 85, 204);" id="yui_3_16_0_ym19_1_1491045957147_4473">http://www.w3.org/<wbr id="yui_3_16_0_ym19_1_1491045957147_4474">2000/09/xmldsig#</a>" entityID="<a href="http://test-learning-admin-palfinger.cloudapp.net/idp" target="_blank" data-saferedirecturl="https://www.google.com/url?hl=en&q=http://test-learning-admin-palfinger.cloudapp.net/idp&source=gmail&ust=1491132226250000&usg=AFQjCNFImqBY5boIFEQLCypVXKctnOKVIg" style="color: rgb(17, 85, 204);" id="yui_3_16_0_ym19_1_1491045957147_4475">http://test-<wbr id="yui_3_16_0_ym19_1_1491045957147_4476">learning-admin-palfinger.<wbr id="yui_3_16_0_ym19_1_1491045957147_4477">cloudapp.net/idp</a>"></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4407"><md:IDPSSODescriptor <b>WantAuthnRequestsSigned</b>="true" protocolSupportEnumeration="</span><wbr style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4408"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4409">urn:oasis:names:tc:SAML:2.0:</span><wbr style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4410"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4411">protocol"></span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;">And the rule defined for them is this:</span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1491045957147_4528"> </span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4529"> <RelyingParty Name="</span><a href="http://test-learning-admin-palfinger.cloudapp.net/idp" target="_blank" data-saferedirecturl="https://www.google.com/url?hl=en&q=http://test-learning-admin-palfinger.cloudapp.net/idp&source=gmail&ust=1491132226170000&usg=AFQjCNHfuQARXT-Vk6TTTcrKe9laiJ2Rrg" style="color: rgb(17, 85, 204); font-family: arial, sans-serif; font-size: 12.8px; background-color: rgb(255, 255, 255);" id="yui_3_16_0_ym19_1_1491045957147_4530">http://test-learning-<wbr id="yui_3_16_0_ym19_1_1491045957147_4531">admin-palfinger.cloudapp.net/<wbr id="yui_3_16_0_ym19_1_1491045957147_4532">idp</a><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;" id="yui_3_16_0_ym19_1_1491045957147_4533">" signing ="true"/> </span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1491045957147_4534"> </span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1491045957147_4563">Maybe I am just old and blind but I cannot see anything that would prevent the signing from occurring. Can anyone offer any insight here?</span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1491045957147_4178" dir="ltr"><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.8px; white-space: pre-wrap;">Thanks!</span></div></div></body></html>