<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hey All,<div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>I’ve been having a hard time setting up Duo Admin Panel with Shibboleth so if anyone can shed some light that be great.</div><div class=""><br class=""></div><div class="">I keep getting:</div><div class=""><br class=""></div><div class="">Invalid response from SSO provider.</div><div class=""><br class=""></div><div class="">I tried unencrypted assertions with my </div><div class=""><br class=""></div><div class=""> <bean parent="RelyingPartyByName" c:relyingPartyIds=“xxxxx"><br class=""> <property name="profileConfigurations"><br class=""> <list><br class=""> <bean parent="SAML2.SSO" p:encryptAssertions="false" /><br class=""> </list><br class=""> </property><br class=""> </bean></div><div class=""><br class=""></div><div class="">(Where XXX is my Duo URL stuff)</div><div class=""><br class=""></div><div class="">But that didn’t work.</div><div class=""><br class=""></div><div class="">I saw this in there document (<a href="https://help.duo.com/s/article/4388?language=en_US" class="">https://help.duo.com/s/article/4388?language=en_US</a>)</div><div class=""><br class=""></div><div class=""><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>• If the IdP is not signing both the assertion and the response. Duo requires that ADFS, Azure, Duo Access Gateway, Okta, and Shibboleth sign both the assertion and the response.<br class=""><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>• To resolve this issue when using one of these IdPs, configure the IdP to sign both the assertion and the response.</div></div></div><div class=""><br class=""></div><div class="">——</div><div class=""><br class=""></div><div class="">How do I do that? I assume signing the assertion is just me taking out that relying party section but how do I sign the response?</div><div class=""><br class=""></div><div class="">Thanks for your help!</div><div class=""><br class=""></div><div class="">Any suggestions would be greatly appreciated!</div><div class=""><br class=""></div><div class="">Mel</div><div class=""><br class=""></div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><font color="#007236" class=""><b class="">Melvin Lasky</b><br class="">Associate Director of Enterprise Architecture</font><br class=""><br class=""></span></div><span><img apple-inline="yes" id="AD28156D-6A12-4C3E-8D0C-5B1FEA3D626C" src="cid:30040C3B-58F3-41D0-91CF-B57E6B6E2FB7@manhattan.edu" class=""></span><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="font-size: 14px;" class=""><br class=""><br class=""><br class="">Riverdale, NY 10471<br class="">Phone: 718-862-7410<br class=""><a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a><br class="">www.manhattan.edu</span><br class=""><br class=""></div>
</div>
<br class=""></div></body></html>