<HTML><BODY><FONT style='white-space:pre-wrap;font-family: Helvetica Neue, Helvetica, Arial, sans-serif;margin: 1em 0;'>I've been asked to look into integrating cirqlive with our existing IDP 3 installation. Cirqlive adds a link between Sakai and webex sso. During my research I found that cirqlive expects the private key of our IDP so that it can sign the assertions that it sends to WebEx. <br><br>Obvious security concerns aside, when I reached out to cirqlive for clarification, I received the following PDF in reply. It seems that, given architecture 1 (page 3), they feel that sharing the idp's private key is okay. They also reference using separate keys for different SPs, which as far as im aware, isn't possible with IDP 3.<br><br><a href='https://documentation.cirqlive.com/manuals/SSO/Multi-Source_SAML_Authentication_with_WebEx_(MEETS).pdf'>https://documentation.cirqlive.com/manuals/SSO/Multi-Source_SAML_Authentication_with_WebEx_(MEETS).pdf</a><br><br>Does anybody else have experience with this?<br><br>Joseph Fischetti<br>Linux System Administrator<br>Marist College</FONT></BODY></HTML>