<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:11pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Our Adobe / Okta integration is vanilla. The only non-default setting we run is to disable assertion encryption, but that (if I recall correctly) is just because our tenant hasn't been configured to support it.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Michael</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Luke Whittington <lwhittin@uvic.ca><br>
<b>Sent:</b> Wednesday, December 20, 2017 6:29:12 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: IdP 3.2.1 integration with Adobe/Okta</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:x_link, span.x_MsoHyperlink
{color:#0563C1;
text-decoration:underline}
a:x_visited, span.x_MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
span.x_EmailStyle17
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US">
<div>We're on IDP 3.3.1 and haven't had to specify a signing method. Are you signing your assertions?</div>
<div><br>
</div>
<div>Luke</div>
<div><br>
</div>
<div>On Wed, 2017-12-20 at 21:35 +0000, King, David wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid; padding-left:1ex">
<div class="x_WordSection1">
<p class="x_MsoNormal">Hi everyone,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">We have been trying to integrate our mostly vanilla Shibboleth IdP 3.2.1 with Adobe creative cloud (Okta being the SP provider). We have worked through the non-standard IDs and the requirement of a emailAddress NameID. However, we are
still having a stumbling block with them that I did not see mentioned in the archives or the wiki.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">They are now saying that we need to configure our IdP to send SHA1 signatures instead of SHA256. Did other folks have this issue with Adobe/Okta? If so, how did you resolve it? If not, do you have a special relying-party configuration
or did you edit the SP metadata?</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks in advance for the help,</p>
<p class="x_MsoNormal">David</p>
</div>
</blockquote>
<div><span>
<pre>-- <br></pre>
<div style="color:rgb(0,0,0); width:71ch">Luke Whittington</div>
<div style="color:rgb(0,0,0); width:71ch">Web Application Developer</div>
<div style="color:rgb(0,0,0); width:71ch">Development Services, University of Victoria</div>
<div style="color:rgb(0,0,0); width:71ch"><a href="mailto:lwhittin@uvic.ca">lwhittin@uvic.ca</a> - 250-472-5696</div>
</span></div>
</div>
</body>
</html>