<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>JFI, Alan Buxey just gave me the information that
https://"yourVanityURL".zoom.us/saml/metadata/sp would not return
the wildcard in every case. In our case the metadata certainly do
contain the mentioned wildcard certificate, in Alan's case they
seem to contain valid certificates. Maybe different licence
models?<br>
</p>
<p>Martin<br>
</p>
<div class="moz-cite-prefix">Am 14.04.20 um 09:32 schrieb Martin
Haase:<br>
</div>
<blockquote type="cite"
cite="mid:0b03ec89-b0e1-98d3-7fa8-5a75558d4f8d@DAASI.de">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<p>Hi list,</p>
<p>some years back, Zoom used to be unable to sign SLO requests.
Now they do - however, the IdP would not honor them:<br>
</p>
<p>ERROR
[org.opensaml.security.x509.impl.BasicX509CredentialNameEvaluator:301]
- Credential failed name check:
[subjectName='CN=*.zoom.us,OU=Domain Control Validated']</p>
<p>I suspect it has to do with the wildcard certificate? <br>
</p>
<p>What would you advise - toggle off signing SLO requests? Can I
use idp.logout.authenticated just for one SP? <br>
</p>
<p>Or push back?<br>
</p>
<p>Regards</p>
<p>Martin<code class="text plain"><br>
</code></p>
<pre class="moz-signature" cols="72">--
Dr. Martin Haase, Solutions Engineer
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-0
fax: +49 7071 407109-9
email: <a class="moz-txt-link-abbreviated" href="mailto:martin.haase@daasi.de" moz-do-not-send="true">martin.haase@daasi.de</a>
web: <a class="moz-txt-link-abbreviated" href="http://www.daasi.de" moz-do-not-send="true">www.daasi.de</a>
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<pre class="moz-signature" cols="72">--
Dr. Martin Haase, Solutions Engineer
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-0
fax: +49 7071 407109-9
email: <a class="moz-txt-link-abbreviated" href="mailto:martin.haase@daasi.de">martin.haase@daasi.de</a>
web: <a class="moz-txt-link-abbreviated" href="http://www.daasi.de">www.daasi.de</a>
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
</pre>
</body>
</html>