<html><body><div dir="ltr">I prefer but not insisting on signed requests; their metadata provided signing cert and the request was signed, but the IdP claimed it failed to meet security requirements.</div><div dir="ltr"><br></div><div dir="ltr">David<br><br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 30Aug, 2021 at 11:19:05, Peter Schober <<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>
* IAM David Bantz <<a href="mailto:dabantz@alaska.edu">dabantz@alaska.edu</a>> [2021-08-30 20:57]:<br><blockquote type="cite"> however, [the SP] abandoned attempts to use their internal SAML<br></blockquote><blockquote type="cite"> service because they were unable to provide a digitally signed<br></blockquote><blockquote type="cite"> request that my Shibboleth IdP would accept.<br></blockquote><br>Why would you insist on signed SAML authn requests?<br><br>-peter<br>-- <br>For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div>
</div></body></html>