<html><body><div dir="ltr">
I expect the certificate public key for signed assertions from the IdP to be in (using same . convention):</div><div dir="ltr"><br></div><div dir="ltr"><span style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal">EntityDescriptor.</span><span style="color:rgb(136,18,128);font-family:monospace">IDPSSODescriptor.</span><span style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal">KeyDescriptor</span><span class="html-attribute" style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal"> <span class="html-attribute-name">use</span>="<span class="html-attribute-value">signing</span>”</span><span style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal">.X509 certificate</span><br></div><div dir="ltr"><br></div><div dir="ltr">Signing key and signature at the EntityDescriptor level may be signing the IdP’s metadata.</div><div dir="ltr"><br></div><div dir="ltr"><br></div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 11Jul2022 at 09:09:04, "Goldberg, Arthur P via users" <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
<div>
<div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
</div>
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" dir="ltr"><span style="font-size:14.666666984558105px">...</span></p><ol style="margin-top:0in" start="1" type="1"><li class="MsoListParagraph" style="margin-left:0in"><span style="font-size:11.0pt">AzureIdPMetadata.xml contains a certificate, identified by the nested elements EntityDescriptor.Signature.KeyInfo.X509Data.X509Certificate (where the
dot notation indicates nesting).</span></li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt"></span></p></div></div></div></blockquote><div class="gmail_quote"><br></div><div class="gmail_quote"><br></div><div class="gmail_quote"><br></div><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite"><div><div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"><div class="WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I’m simultaneously verifying with the IdP managers that this certificate in AzureIdPMetadata.xml is the IdP’s certificate which is used to communicate with my SP.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Running shibboleth 3.2.2.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Arthur</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">-- </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">Arthur Goldberg, PhD</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black"><a href="https://labs.icahn.mssm.edu/msdw/"><span style="color:#0563c1">Mount Sinai Data Warehouse</span></a></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black"><a href="https://labs.icahn.mssm.edu/minervalab/scientific-computing-and-data"><span style="color:#0563c1">Scientific Computing and Data</span></a></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">Associate Professor of Genetics and Genomic Sciences<br>
Institute for Data Science and Genomic Technology<br>
Mount Sinai School of Medicine</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black"><a href="mailto:Arthur.Goldberg@mssm.edu"><span style="color:#0563c1">Arthur.Goldberg@mssm.edu</span></a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">646 526 5020<br>
<a href="https://mssm.zoom.us/my/arthur.goldberg?pwd=LzByMGJOZC9wM3A2aHV6OU94eUtSQT09"><span style="color:#0563c1">Zoom</span></a>
</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
<div>
<div>
-- <br>For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div></body></html>