<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
Yes, that's the right setting to change. You can inspect the outbound assertion by turning up the logging in logback.xml and verify that it is being sent unencrypted and successfully. If it's not, I'd figure out why.
<div><br>
</div>
<div>400 Bad Request is more indicative of something bad, like this payload getting delivered to the wrong address, or a lazy implementation. Either way, I would expect to find more answers at the SP side.</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Rafael Peroco <rafaelp@xlsol.com><br>
<b>Sent:</b> Wednesday, January 24, 2018 4:44:33 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Disable encryption on SAML response</font>
<div> </div>
</div>
<div>
<div dir="ltr">Nate,
<div><br>
</div>
<div>Thank you for your answer.</div>
<div><br>
</div>
<div>I've followed your instructions but keep getting "400 Bad request" from SP. </div>
<div><br>
</div>
<div>For confirmation, I set:</div>
<div>idp.encryption.optional = true<br>
</div>
<div><br>
</div>
<div>Is that right?</div>
</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr">Em qua, 24 de jan de 2018 às 21:53, Klingenstein, Nate <<a href="mailto:nklingenstein@calstate.edu">nklingenstein@calstate.edu</a>> escreveu:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div lang="EN-US">
<div class="x_m_-3037115587284591960WordSection1">
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d">Rafael,<u></u><u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d">You need to set encryption to be optional using idp.properties. That won’t disable it, but it will allow the IdP to send assertions that are not encrypted
if there is also no key available for encryption to that service provider.<u></u><u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d">Between that setting and ensuring there is no encryption key, you should be set.<u></u><u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d">Take care,<u></u><u></u></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d">Nate.<u></u><u></u></span></p>
<p class="x_MsoNormal"><a name="x_m_-3037115587284591960__MailEndCompose"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1f497d"><u></u> <u></u></span></a></p>
<span></span>
<p class="x_MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif"> users [mailto:<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>]
<b>On Behalf Of </b>Rafael Peroco<br>
<b>Sent:</b> Wednesday, January 24, 2018 3:45 PM<br>
<b>To:</b> <a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a><br>
<b>Subject:</b> Disable encryption on SAML response<u></u><u></u></span></p>
</div>
</div>
<div lang="EN-US">
<div class="x_m_-3037115587284591960WordSection1">
<p class="x_MsoNormal"><u></u> <u></u></p>
<p class="x_MsoNormal">Is there a way to disable the SAML response encryption?<u></u><u></u></p>
<div>
<p class="x_MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="x_MsoNormal">The SP side (Oracle) is saying that need response without cryptography.<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="x_MsoNormal">Thanks<u></u><u></u></p>
</div>
<p class="x_MsoNormal"><br clear="all">
<br>
-- <u></u><u></u></p>
<div>
<div>
<p class="x_MsoNormal"><b><span style="font-size:16.0pt; font-family:"Calibri",sans-serif; color:black">RAFAEL PEROCO</span></b><u></u><u></u></p>
<div>
<div>
<p class="x_MsoNormal"><span style="font-size:13.5pt; font-family:"times",serif; color:black"><a href="tel:+551142100550" target="_blank"><span style="font-size:12.0pt; font-family:"Calibri",sans-serif; color:black; text-decoration:none">+55 11 4210-0550</span></a><u></u><u></u></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:13.5pt; font-family:"times",serif; color:black"><a href="tel:+552120181310" target="_blank"><span style="font-size:12.0pt; font-family:"Calibri",sans-serif; color:black; text-decoration:none">+55 21 2018-1310</span></a><u></u><u></u></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:13.5pt; font-family:"times",serif; color:black"><a href="tel:+5544991422910" target="_blank"><span style="font-size:12.0pt; font-family:"Calibri",sans-serif; color:black; text-decoration:none">+55 44 99142-2910</span></a><u></u><u></u></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:13.5pt; font-family:"times",serif; color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:19.0pt; font-family:"Calibri",sans-serif; color:#00acc9">XL<span class="x_m_-3037115587284591960inbox-inbox-inbox-apple-converted-space"> </span></span><span style="font-size:19.0pt; font-family:"Calibri",sans-serif; color:#a7a7a7">SOLUTIONS</span><span style="font-size:13.5pt; font-family:"times",serif; color:black"><u></u><u></u></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:13.5pt; font-family:"times",serif; color:black"><a href="http://www.xlsol.com" target="_blank"><span style="font-size:12.0pt; font-family:"Calibri",sans-serif; color:black; text-decoration:none">www.xlsol.com</span></a><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div lang="EN-US">
<div class="x_m_-3037115587284591960WordSection1"></div>
</div>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a></blockquote>
</div>
-- <br>
<div dir="ltr" class="x_gmail_signature">
<div dir="ltr"><span style="color:rgb(0,0,0); font-family:calibri; font-size:16pt; font-weight:bold">RAFAEL PEROCO</span><span style="color:rgb(0,0,0); font-family:times; font-size:medium"></span>
<div style="color:rgb(0,0,0); font-family:times; font-size:medium">
<div><a href="tel:+551142100550" style="font-family:calibri; font-size:12pt; color:rgb(0,0,0); text-decoration:none">+55 11 4210-0550</a></div>
<div><a href="tel:+552120181310" style="font-family:calibri; font-size:12pt; color:rgb(0,0,0); text-decoration:none">+55 21 2018-1310</a></div>
<div><a href="tel:+5544991422910" style="font-family:calibri; font-size:12pt; color:rgb(0,0,0); text-decoration:none">+55 44 99142-2910</a></div>
<div><span style="font-family:calibri; font-size:12pt"><br>
</span></div>
<div><span style="font-family:calibri; font-size:19pt; color:rgb(0,172,201)">XL<span class="x_inbox-inbox-inbox-Apple-converted-space"> </span></span><span style="font-family:calibri; font-size:19pt; color:rgb(167,167,167)">SOLUTIONS</span></div>
<div><a href="http://www.xlsol.com" style="font-family:calibri; font-size:12pt; color:rgb(0,0,0); text-decoration:none">www.xlsol.com</a></div>
</div>
</div>
</div>
</div>
</body>
</html>